Hack to avoid sed on volume (default.conf)

.gitignore

@@ -1 +1,2 @@
 config/master.key
+npm.tgz

roles/firewall/tasks/main.yml

@@ -4,6 +4,13 @@
     name: iptables-persistent
     state: present
 
+# TURN IT OFF
+- name: Turn iptables off for now
+  service:
+    name: iptables
+    state: stopped
+    enabled: no
+
 - name: Allow all loopback traffic
   iptables:
     chain: INPUT

roles/nginx-proxy-manager/files/docker-compose.yml

@@ -1,7 +1,7 @@
 version: "3"
 services:
   app:
-    image: 'jc21/nginx-proxy-manager:latest'
+    image: jc21/nginx-proxy-manager:2.9.22
     restart: unless-stopped
     ports:
       - 80:80 # Public HTTP Port
@@ -11,5 +11,7 @@ services:
       - ./data:/data
       - ./letsencrypt:/etc/letsencrypt
       - ./default.conf:/etc/nginx/conf.d/default.conf
+      # hack to avoid sed on default.conf
+      - /dev/null:/etc/s6-overlay/s6-rc.d/prepare/50-ipv6.sh
     environment:
       - AWS_CONFIG_FILE=/etc/letsencrypt/credentials/credentials-6

roles/ssh/tasks/main.yml

@@ -29,7 +29,7 @@
       filter = sshd
       #  notify: Restart fail2ban
 
-- name: Start fail2ban on boot
+- name: Turn fail2ban off for now
   service:
     name: fail2ban
     enabled: false