Improve UFW ansible managed rule matching

README.md

@@ -128,8 +128,8 @@ roles:
 ## Note regarding UFW firewall rules
 
 Instead of resetting `ufw` every run and by doing so causing network traffic
-disruption, the role deletes every `ufw` rule without
-`comment: ansible managed` task parameter and value.
+disruption, the role deletes every `ufw` rule that doesn't have a comment
+ending with `ansible managed`.
 
 The role also sets default deny policies, which means that firewall rules
 needs to be created for any additional ports except those specified in

tasks/ufw.yml

@@ -109,7 +109,7 @@
   ansible.builtin.shell:
     cmd: |
       set -o pipefail
-      ufw show added | grep '^ufw' | grep -i -v "'ansible\smanaged'" | sed 's/ufw //g'
+      ufw show added | grep '^ufw' | grep -i -v "comment '.*ansible\smanaged'" | sed 's/ufw //g'
   args:
     executable: /bin/bash
   changed_when: false