---

- name: place custom firewall rules
  template:
    src: 01-sec.rules.j2
    dest: /etc/iptables/rules.d/01-sec.rules
    owner: root
    group: root
    mode: 0644
  notify:
    - run firewall