require rpcbind

roles/gluster/tasks/main.yaml

@@ -1,4 +1,19 @@
 ---
+- name: install rpcbind
+  apt:
+    name: rpcbind
+- name: disable rpcbind from the internet
+  iptables:
+    action: insert
+    chain: INPUT
+    comment: drop portmapper
+    in_interface: "!nodevpn"
+    jump: DROP
+    protocol: "{{item}}"
+    destination_port: "111"
+  with_items:
+    - tcp
+    - udp
 - name: install gluster package
   apt:
     name: glusterfs-server
@@ -15,7 +30,7 @@
   mount:
     path: /mnt/gluster
     src: /dev/sdb
-    options: noatime
+    opts: noatime
     fstype: ext4
     state: mounted
 - name: gluster peers