---
- file:
    path: /root/firewall
    state: directory
    mode: 0700

- name: install firewall script
  template:
    src: ../templates/firewall.sh
    dest: /root/firewall/firewall.sh
    owner: root
    group: root
    mode: 0744

- command: /root/firewall/firewall.sh

# Docker needs to be restarted if present.
# Because it writs its own iptables rules.
- name: check if docker is present
  command: /usr/bin/docker -v
  register: result
  ignore_errors: True

- service:
    name: docker
    state: restarted
  when: result|succeeded