add a variable for ssh port

defaults/main.yml

@@ -12,6 +12,8 @@ iptables_do_save: true
 iptables_do_clean: true
 iptables_tables_to_clean: [ 'raw', 'filter', 'nat', 'mangle', 'security' ]
 
+iptables_host_ssh_port: 22
+
 iptables_open_port_out: [ 22, 80, 443 ]
 iptables_open_port_in: []
 

tasks/base.yml

@@ -64,11 +64,10 @@
     jump: ACCEPT
     ip_version: "{{ ip_version }}"
 
-# warning: if you change openssh tcp port, you have to use iptables_close_port_in var to close port 22
 - name: Allow Ssh In
   ansible.builtin.iptables:
     chain: INPUT
     protocol: 'tcp'
-    destination_port: 22
+    destination_port: "{{ iptables_host_ssh_port }}"
     jump: ACCEPT
     ip_version: "{{ ip_version }}"