initial (#1)

# ansible_role-template

# ansible_role-firewalld

Install & configure firewalld.

- name: (Re)start firewalld service

  ansible.builtin.systemd:

    state: restarted

    enabled: true

    daemon_reload: true

    name: "firewalld.service"

collections: []

dependencies: []

galaxy_info:

  author: template

  description: template

  author: Dmitriy Safronov

  description: Install & configure firewalld.

  license: Apache-2.0

  min_ansible_version: "2.16"

  namespace: template

  role_name: template

  namespace: dmitriysafronov

  role_name: firewalld

---

- name: Create override directory for firewalld systemd service

  ansible.builtin.file:

    path: "/etc/systemd/system/firewalld.service.d"

    state: directory

    mode: '0755'

    owner: root

    group: root

- name: Create override file for firewalld systemd service

  ansible.builtin.template:

    src: firewalld.override.j2

    dest: "/etc/systemd/system/firewalld.service.d/localhost_ssh.conf"

    mode: '0644'

    owner: root

    group: root

  notify: (Re)start firewalld service

- name: Install firewall packages

  ansible.builtin.package:

    name:

      - firewalld

      - python3-firewall

    state: present

{{ ansible_managed | comment }}

[Service]

ExecStartPost=-/usr/bin/firewall-cmd --permanent --zone=trusted --add-interface=lo

ExecStartPost=-/usr/bin/firewall-cmd --permanent --add-port={{ ansible_port | default('22') }}/tcp

ExecStartPost=-/usr/bin/firewall-cmd --reload