- name: 'Install firewall package (ferm)'
  apt:
    pkg:
      - 'linux-image-{{ facter_architecture }}'
      - 'ferm'
    state: 'present'
  tags:
    - 'firewall'

- name: 'Install firewall configuration (ferm.conf)'
  template:
    src: 'ferm/ferm.conf.j2'
    dest: '/etc/ferm/ferm.conf'
    owner: 'root'
    group: 'root'
    mode: '0644'
  notify:
    - 'Apply firewall rules (ferm)'
  tags:
    - 'firewall'

# vim: ft=yaml.ansible