diff --git a/firewalld.yml b/firewalld.yml
new file mode 100644
index 0000000..610ba38
--- /dev/null
+++ b/firewalld.yml
@@ -0,0 +1,21 @@
+- hosts: '!no-firewalld'
+  tasks:
+  - name: ensure firewalld is installed
+    package:
+      name=firewalld
+      state=present
+    tags:
+    - install
+    - firewalld
+  - name: ensure firewalld starts at boot
+    service:
+      name=firewalld
+      enabled=yes
+    tags:
+    - firewalld
+  - name: ensure firewalld is running
+    service:
+      name=firewalld
+      state=started
+    tags:
+    - firewalld