configpolicy/roles/vmhost/handlers/main.yml

- name: reload systemd
  systemd:
    daemon_reload: true

- name: save firewalld configuration
  command: firewall-cmd --runtime-to-permanent