- name: Modify firewall services
  ansible.posix.firewalld:
    service: "{{ item.service }}"
    state: "{{ item.state }}"
    permanent: true
    immediate: true
  loop: "{{ host_firewall.services }}"
  when: host_firewall.services is defined

- name: Modify firewall ports
  ansible.posix.firewalld:
    port: "{{ item.port }}"
    state: "{{ item.state }}"
    permanent: true
    immediate: true
  loop: "{{ host_firewall.ports }}"
  when: host_firewall.ports is defined

- name: Modify rich rules
  ansible.posix.firewalld:
    rich_rule: "{{ item.rule }}"
    state: "{{ item.state }}"
    permanent: true
    immediate: true
  loop: "{{ host_firewall.rich_rules }}"
  when: host_firewall.rich_rules is defined