roles/vmhost: Open libvirt migration firewall port

roles/vmhost/handlers/main.yml

@@ -0,0 +1,2 @@
+- name: save firewalld configuration
+  command: firewall-cmd --runtime-to-permanent

roles/vmhost/tasks/main.yml

@@ -61,3 +61,11 @@
     name: '{{ item.name }}'
     autostart: true
   with_items: '{{ libvirt_networks }}'
+
+- name: ensure libvirtd migration port is allowed in the firewall
+  firewalld:
+    port=49152/tcp
+    permanent=no
+    immediate=yes
+    state=enabled
+  notify: save firewalld configuration