playbook-wireguard.yml

@@ -3,12 +3,3 @@
   become: yes
   roles:
     - wireguard
-  tasks:
-    - name: Setup wireguard as trusted network
-      firewalld:
-        zone: trusted
-        immediate: yes
-        interface: wg0
-        permanent: yes
-        state: present
-      when: "'frames' in group_names"

roles/monit/tasks/frame.yml

@@ -67,3 +67,13 @@
       tags:
         - monit-config
         - monit-fim
+    - name: Setup firewall rule
+      firewalld:
+        port: 2812/tcp
+        zone: public
+        permanent: yes
+        state: enabled
+        immediate: yes
+      tags:
+        - monit-config
+  

roles/munin-node/tasks/main.yml

@@ -35,3 +35,13 @@
       notify: restart munin-node
       tags:
         - munin-node-config
+    - name: Setup firewall rule
+      firewalld:
+        port: 4949/tcp
+        zone: public
+        permanent: yes
+        state: enabled
+        immediate: yes
+      tags:
+        - munin-node-config
+