mariadb: Disable firewall rules when networking is disabled

Signed-off-by: Florian Pritz <bluewind@xinu.at>

roles/mariadb/tasks/main.yml

@@ -51,5 +51,5 @@
   # the source addresses here could be tightened up more, but it's far better
   # than having mariadb open to the world
 - name: open firewall holes to other infrastructure hosts
-  firewalld: service=mysql permanent=true state=enabled source={{item}}
+  firewalld: service=mysql permanent=true state="{{'disabled' if mariadb_skip_networking else 'enabled'}}" source={{item}}
   with_items: "{{ groups['all'] }}"