add firewall

playbooks/firewall.yml

@@ -0,0 +1,4 @@
+- name: Configure firewall
+  hosts: nucs
+  roles:
+    - firewall

roles/firewall/tasks/main.yml

@@ -0,0 +1,21 @@
+- name: Install firewalld
+  apt:
+    pkg:
+      - firewalld
+    state: latest
+    update_cache: true
+- name: Allow SSH
+  firewalld:
+    service: ssh
+    permanent: yes
+    state: enabled
+- name: Allow DHCPv6
+  firewalld:
+    service: dhcpv6-client
+    permanent: yes
+    state: enabled
+- name: Start firewalld
+  systemd:
+    enabled: true
+    name: sshd
+    state: started