# file: roles/httpd/tasks/secure.yml

- name: Allow public to use http service
  shell:  firewall-cmd --zone=public --add-service=http --permanent

- name: Allow public to port 80 in firewall
  shell:  firewall-cmd --zone=public --add-port=80/tcp --permanent

- name: Allow public to port 9000 in firewall
  shell:  firewall-cmd --zone=public --add-port=9000/tcp --permanent

- name: Allow public to port 9001 in firewall
  shell:  firewall-cmd --zone=public --add-port=9001/tcp --permanent

- name: Allow public to port 8080 in firewall
  shell:  firewall-cmd --zone=public --add-port=8080/tcp --permanent

- name: Allow public to port 11211 in firewall
  shell:  firewall-cmd --zone=public --add-port=11211/tcp --permanent

- name: Allow public to port 3306 in firewall
  shell:  firewall-cmd --zone=public --add-port=3306/tcp --permanent

- name: Allow public to port 443 in firewall
  shell:  firewall-cmd --zone=public --add-port=443/tcp --permanent

- name: Reload firewall
  shell:  firewall-cmd --reload

- name: Flush iptables
  shell: iptables -F