Add wireguard on frames to trusted zone

playbook-wireguard.yml

@@ -3,3 +3,12 @@
   become: yes
   roles:
     - wireguard
+  tasks:
+    - name: Setup wireguard as trusted network
+      firewalld:
+        zone: trusted
+        immediate: yes
+        interface: wg0
+        permanent: yes
+        state: present
+      when: "'frames' in group_names"

roles/monit/tasks/frame.yml

@@ -67,13 +67,3 @@
       tags:
         - monit-config
         - monit-fim
-    - name: Setup firewall rule
-      firewalld:
-        port: 2812/tcp
-        zone: public
-        permanent: yes
-        state: enabled
-        immediate: yes
-      tags:
-        - monit-config
-  

roles/munin-node/tasks/main.yml

@@ -35,13 +35,3 @@
       notify: restart munin-node
       tags:
         - munin-node-config
-    - name: Setup firewall rule
-      firewalld:
-        port: 4949/tcp
-        zone: public
-        permanent: yes
-        state: enabled
-        immediate: yes
-      tags:
-        - munin-node-config
-