ansible-playbooks/roles/common/tasks/firewall.yml

- name: Install firewall package (ferm)
  apt: pkg={{ item }} state=installed update_cache=yes
  with_items:
    - linux-image-{{ facter_architecture }}
    - ferm
  when: with_firewall

- name: Install firewall configuration (ferm.conf)
  template: src=ferm/ferm.conf.j2 dest=/etc/ferm/ferm.conf owner=root group=root mode=0644
  notify:
    - Apply firewall rules (ferm)
  when: with_firewall