ansible-keycloak/roles/keycloak/tasks/firewalld.yml

---
- name: Ensures required package firewalld are installed
  ansible.builtin.include_tasks: fastpackages.yml
  vars:
    packages_list:
      - firewalld

- name: Enable and start the firewalld service
  become: yes
  ansible.builtin.systemd:
    name: firewalld
    enabled: yes
    state: started

- name: "Configure firewall for {{ keycloak.service_name }} ports"
  become: yes
  firewalld:
    port: "{{ item }}"
    permanent: true
    state: enabled
    immediate: yes
  loop:
    - "{{ keycloak_http_port }}/tcp"
    - "{{ keycloak_https_port }}/tcp"
    - "{{ keycloak_management_http_port }}/tcp"
    - "{{ keycloak_management_https_port }}/tcp"
    - "{{ keycloak_jgroups_port }}/tcp"
    - "{{ keycloak_ajp_port }}/tcp"