- name: 'Install firewall package (ferm)'
  apt:
    pkg: '{{ item }}'
    state: 'installed'
  with_items:
    - 'linux-image-{{ facter_architecture }}'
    - 'ferm'

- name: 'Install firewall configuration (ferm.conf)'
  template:
    src: 'ferm/ferm.conf.j2'
    dest: '/etc/ferm/ferm.conf'
    owner: 'root'
    group: 'root'
    mode: '0644'
  notify:
    - 'Apply firewall rules (ferm)'