ansible-base/roles/client_iptables/defaults/main.yml

---
# defaults file for client_reboot

# All authorized TCP ports
tcp_authorized_ports:
  - 22

# All incoming authorized IP (all ports and all protocols)
ip_authorized: []