--- #adguard/tasks/firewall.yml - name: Open required firewall rules become: true ansible.posix.firewalld: port: "{{ item.port | default(omit) }}" service: "{{ item.service | default(omit) }}" permanent: true state: enabled immediate: true loop: "{{ adguard_firewall_rules }}"