From b05edbf7fbd1079338032f28ac21be854e6684bb Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Thu, 8 Jun 2023 10:07:32 -0500
Subject: [PATCH] r/minio: Configure firewall

The firewall needs to allow inbound connections to the MinIO HTTP API
and web UI ports.
---
 roles/minio/tasks/deploy.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/roles/minio/tasks/deploy.yml b/roles/minio/tasks/deploy.yml
index 0cda700..e44f0ea 100644
--- a/roles/minio/tasks/deploy.yml
+++ b/roles/minio/tasks/deploy.yml
@@ -105,3 +105,16 @@
     state: started
   tags:
   - service
+
+- name: ensure firewall is configured for minio
+  firewalld:
+    port: '{{ item }}/tcp'
+    permanent: true
+    immediate: true
+    state: enabled
+  loop:
+  - 9000
+  - 9090
+  when: host_uses_firewalld|d(true)|bool
+  tags:
+  - firewalld