add handle of ufw

defaults/main.yml

@@ -4,3 +4,6 @@
 signal_data_folder: /var/lib/signal_api
 signal_api_port: 8080
 signal_container_image: bbernhard/signal-cli-rest-api
+handle_ufw: false
+localnetworks:
+  - 192.168.1.0/24

tasks/configure.yml

@@ -24,11 +24,14 @@
   register: container
   ignore_errors: true
 
-- name: Ensure UFW allow traffic to exposed port
+- name: Ensure UFW allow traffic to exposed port from local network
   ufw:
     rule: allow
     route: true
+    from_ip: "{{ item }}"
     to_port: "{{ signal_api_port }}"
+  when: handle_ufw
+  with: "{{ localnetworks }}"
 
 - name: Generate service unit
   shell: podman generate systemd --new --name signal-api > /etc/systemd/system/podman_signal_api.service