- hosts: '!no-firewalld'
  tasks:
  - name: ensure firewalld is installed
    package:
      name=firewalld
      state=present
    tags:
    - install
    - firewalld
  - name: ensure firewalld starts at boot
    service:
      name=firewalld
      enabled=yes
    tags:
    - firewalld
  - name: ensure firewalld is running
    service:
      name=firewalld
      state=started
    tags:
    - firewalld