ansible-middleware.keycloak/roles/keycloak_quarkus/tasks/firewalld.yml

---
- name: Ensure required package firewalld are installed
  ansible.builtin.include_tasks: fastpackages.yml
  vars:
    packages_list:
      - firewalld

- name: Enable and start the firewalld service
  become: "{{ keycloak_quarkus_firewalld_require_privilege_escalation }}"
  ansible.builtin.systemd:
    name: firewalld
    enabled: true
    state: started

- name: "Configure firewall for {{ keycloak.service_name }} http port"
  become: "{{ keycloak_quarkus_firewalld_require_privilege_escalation }}"
  ansible.posix.firewalld:
    port: "{{ item }}"
    permanent: true
    state: enabled
    immediate: true
  loop:
    - "{{ keycloak_quarkus_http_port }}/tcp"
  when: keycloak_quarkus_http_enabled | bool

- name: "Configure firewall for {{ keycloak.service_name }} ports"
  become: "{{ keycloak_quarkus_firewalld_require_privilege_escalation }}"
  ansible.posix.firewalld:
    port: "{{ item }}"
    permanent: true
    state: enabled
    immediate: true
  loop:
    - "{{ keycloak_quarkus_https_port }}/tcp"
    - "{{ keycloak_quarkus_http_management_port }}/tcp"
    - "{{ keycloak_quarkus_jgroups_port }}/tcp"