firewalld_central.yml

---
- name: Install and configure Firewalld on central server
  hosts: central_centreon
  gather_facts: false
  tasks:
    - name: Install the firewalld package
      yum:
        name: firewalld
        state: present
    - name: Activate and start Firewalld
      shell:
        cmd: systemctl enable firewalld && systemctl start firewalld
        warn: false
    - name: Add rule for SSH
      command:
        cmd: firewall-cmd --zone=public --add-service=ssh --permanent
        warn: false
    - name: Add rule for HTTP
      command:
        cmd: firewall-cmd --zone=public --add-service=http --permanent
        warn: false
    - name: Add rule for HTTPS
      command:
        cmd: firewall-cmd --zone=public --add-service=https --permanent
        warn: false
    - name: Add rule for SNMP
      command:
        cmd: firewall-cmd --zone=public --add-service=snmp --permanent
        warn: false
    - name: Add rule for SNMPTRAP
      command:
        cmd: firewall-cmd --zone=public --add-service=snmptrap --permanent
        warn: false
    - name: Add rule for Gorgone
      command:
        cmd: firewall-cmd --zone=public --add-port=5556/tcp --permanent
        warn: false
    - name: Add rule for Broker
      command:
        cmd: firewall-cmd --zone=public --add-port=5669/tcp --permanent
        warn: false
    - name: Reload Firewalld
      command:
        cmd: firewall-cmd --reload
        warn: false