---
- hosts: 16200915-homepage
  become: yes
  become_user: root

  roles:
    - podman-host
    - repo-epel
    - certbot
  tasks:
    - name: Root port forwards for web traffic.
      firewalld:
        rich_rule: rule family=ipv4 forward-port port=443 protocol=tcp to-port=4443
        zone: public
        permanent: true
        immediate: true
        state: enabled
      firewalld:
        rich_rule: rule family=ipv4 forward-port port=80 protocol=tcp to-port=8080
        zone: public
        permanent: true
        immediate: true
        state: enabled