- name: Directory for firewall parts
  ansible.builtin.file:
    group: root
    owner: root
    name: /etc/firewall.d/
    mode: "0700"
    state: directory

- name: Firewall template
  ansible.builtin.template:
    dest: /etc/network/if-pre-up.d/firewall
    group: root
    owner: root
    mode: "0755"
    src: firewall.j2
  notify: Restart firewall

- name: Firewall for mosh
  ansible.builtin.template:
    dest: /etc/firewall.d/mosh
    group: root
    owner: root
    mode: "0755"
    src: mosh.j2
  notify: Restart firewall