Refactor ufw.yml to include retries and delay for firewall rules

ansible/roles/cis_hardening/tasks/ufw.yml

@@ -93,6 +93,8 @@
     policy: deny
     log: true
     comment: ansible managed
+  retries: 5
+  delay: 10
   tags:
     - ufw
     - CIS-UBUNTU2004-3.5.1.7
@@ -108,6 +110,8 @@
     log: true
     logging: low
     comment: ansible managed
+  retries: 5
+  delay: 10
   tags:
     - ufw
     - CIS-UBUNTU2004-3.5.1.7
@@ -137,6 +141,8 @@
     comment: ansible managed
   with_items:
     - "{{ ssh_allowed_networks }}"
+  retries: 5
+  delay: 10
   tags:
     - ufw
     - M1037
@@ -151,6 +157,8 @@
     comment: ansible managed
   with_items:
     - "{{ fw_allowed_ports }}"
+  retries: 5
+  delay: 10
   tags:
     - ufw
     - M1037
@@ -164,6 +172,8 @@
     comment: ansible managed
   with_items:
     - "{{ ufw_outgoing_traffic }}"
+  retries: 5
+  delay: 10
   tags:
     - ufw
     - CIS-UBUNTU2004-3.5.1.5
@@ -182,6 +192,8 @@
     - ufw
     - CIS-UBUNTU2004-3.5.1.4
     - M1037
+  retries: 5
+  delay: 10
   when: fw_loopback_traffic_deny
 
 - name: Allow loopback traffic in
@@ -191,6 +203,8 @@
     interface: lo
     direction: in
     comment: ansible managed
+  retries: 5
+  delay: 10
   tags:
     - ufw
     - CIS-UBUNTU2004-3.5.1.4
@@ -203,6 +217,8 @@
     interface: lo
     direction: out
     comment: ansible managed
+  retries: 5
+  delay: 10
   tags:
     - ufw
     - CIS-UBUNTU2004-3.5.1.4