added switch to firewalld install for Debian/Rhel
switch between apt/yum for Debian vs Rhel; this could
be handled a variety of ways, but thought to keep this
file straightforward for now. Also added comment on iptables,
for which firewalld is just a frontend.
user: name={{ user }} group={{ group }}
become: yes
-- name: Install Firewalld
+- name: Install Firewalld (RedHat)
yum: name=firewalld state=latest update_cache=yes
become: yes
+ when: ansible_os_family == "RedHat"
+
+- name: Install Firewalld (Debian)
+ apt: name=firewalld state=latest update_cache=yes
+ become: yes
+ when: ansible_os_family == "Debian"
+
# TODO: stop iptables service, can't have both iptables and firewalld on same host
+# firewalld is just a frontend for iptables - so we can't remove it
# if we try to stop non existing service ansible fails.
# - name: Stop iptables, ip6tables services
# service: name="{{ item }}" state=stopped
