infra-role-icinga/tasks/firewall.yml

---
- name: Enable Icinga2 Web UI
  iptables:
    comment: 'Icinga2 Web UI'
    chain: INPUT
    jump: ACCEPT
    source: '0.0.0.0/0'
    protocol: 'tcp'
    destination_port: '{{ item }}'
  with_items:
    - 80
    - 443
  notify:
    - Save iptables rules