r/samba-cert: Save firewall configuration

Without making the firewall changes permanent, when a server tries to
renew its certificate after rebooting, it will fail as the ACME server
cannot connect to the HTTP port.

roles/samba-cert/handlers/main.yml

@@ -3,3 +3,5 @@
     name: samba-cert-renew.timer
     state: restarted
 
+- name: save firewalld-configuration
+  command: firewall-cmd --runtime-to-permanent

roles/samba-cert/tasks/main.yml

@@ -28,6 +28,8 @@
   - 80/tcp
   - 5000/tcp
   when: host_uses_firewalld|d(true)
+  notify:
+  - save firewalld configuration
   tags:
   - firewalld