add "firewall" tag to all relevant tasks

playbooks/apollo.yml

@@ -54,3 +54,5 @@
   tasks:
     - name: open firewall hole for hefurd
       firewalld: port=6969/tcp permanent=true state=enabled immediate=yes
+      tags:
+        - firewall

roles/dbscripts/tasks/main.yml

@@ -227,6 +227,8 @@
 - name: open firewall holes for rsync
   firewalld: service=rsyncd permanent=true state=enabled immediate=yes
   when: configure_firewall
+  tags:
+    - firewall
 
 - name: configure svnserve
   copy: dest=/etc/conf.d/svnserve content="SVNSERVE_ARGS=-R -r /srv/svn\n"
@@ -237,6 +239,8 @@
 - name: open firewall holes for svnserve
   firewalld: port=3690/tcp permanent=true state=enabled immediate=yes
   when: configure_firewall
+  tags:
+    - firewall
 
 - name: install systemd timers
   copy: src={{ item }} dest=/etc/systemd/system/{{ item }} owner=root group=root mode=0644

roles/dovecot/tasks/main.yml

@@ -25,3 +25,5 @@
     - imap
     - imaps
   when: configure_firewall
+  tags:
+    - firewall

roles/mariadb/tasks/main.yml

@@ -51,3 +51,5 @@
   firewalld: service=mysql permanent=true state="{{'disabled' if mariadb_skip_networking else 'enabled'}}" source={{item}} immediate=yes
   with_items: "{{ groups['all'] }}"
   when: configure_firewall
+  tags:
+    - firewall

roles/nginx/tasks/main.yml

@@ -72,3 +72,5 @@
     - http
     - https
   when: configure_firewall
+  tags:
+    - firewall

roles/oidentd/tasks/main.yml

@@ -14,3 +14,5 @@
 - name: open firewall holes
   firewalld: port=113/tcp permanent=true state=enabled immediate=yes
   when: configure_firewall
+  tags:
+    - firewall

roles/postfix/tasks/main.yml

@@ -91,3 +91,5 @@
     - smtp
     - smtp-submission
   when: postfix_smtpd_public and configure_firewall
+  tags:
+    - firewall

roles/quassel/tasks/main.yml

@@ -65,3 +65,5 @@
 - name: open firewall holes
   firewalld: port=4242/tcp permanent=true state=enabled immediate=yes
   when: configure_firewall
+  tags:
+    - firewall

roles/sshd/tasks/main.yml

@@ -20,3 +20,5 @@
 - name: open firewall holes
   firewalld: service=ssh permanent=true state=enabled immediate=yes
   when: configure_firewall
+  tags:
+    - firewall

roles/syncrepo/tasks/main.yml

@@ -47,3 +47,5 @@
 - name: open firewall holes
   firewalld: service=rsyncd permanent=true state=enabled immediate=yes
   when: configure_firewall
+  tags:
+    - firewall

roles/zabbix-agent/tasks/main.yml

@@ -66,3 +66,5 @@
 - name: open firewall holes
   firewalld: service=zabbix-agent permanent=true state=enabled immediate=yes
   when: configure_firewall
+  tags:
+    - firewall

roles/zabbix-server/tasks/main.yml

@@ -66,3 +66,5 @@
 - name: open firewall holes
   firewalld: service=zabbix-server permanent=true state=enabled immediate=yes
   when: configure_firewall
+  tags:
+    - firewall