---
- name: Remove firewalld
  ansible.builtin.package:
    name: firewalld
    state: removed

- name: Install iptables packages
  ansible.builtin.package:
    name: "{{ item }}"
    state: installed
  with_items:
    - iptables
    - iptables-services

- name: Create iptables config from template
  ansible.builtin.template:
    src: "{{ item }}.j2"
    dest: "/etc/sysconfig/{{ item }}"
    mode: "0600"
    owner: root
    group: root
  notify: "Reload {{ item }}"
  with_items:
    - iptables
    - ip6tables

- name: Enable iptables service
  ansible.builtin.service:
    name: "{{ item }}"
    state: started
    enabled: true
  with_items:
    - iptables
    - ip6tables