Configure firewall in Ansible

Author: QuLogic

collections/requirements.yml

@@ -1,4 +1,5 @@
 ---
 collections:
+  - name: ansible.posix
   - name: community.general
   - name: community.digitalocean

website.yml

@@ -37,6 +37,38 @@
           - podman
         state: present
 
+    # Firewall setup
+    # ##############
+    - name: Enable firewall
+      ansible.builtin.systemd:
+        name: firewalld.service
+        enabled: true
+        state: started
+
+    - name: Allow SSH on firewall
+      ansible.posix.firewalld:
+        service: ssh
+        permanent: true
+        immediate: true
+        offline: true
+        state: enabled
+
+    - name: Allow HTTP on firewall
+      ansible.posix.firewalld:
+        service: http
+        permanent: true
+        immediate: true
+        offline: true
+        state: enabled
+
+    - name: Allow HTTPS on firewall
+      ansible.posix.firewalld:
+        service: https
+        permanent: true
+        immediate: true
+        offline: true
+        state: enabled
+
     # Prepare and clone Git repositories
     # ##################################
     - name: Create Git repository directories