- hosts: dch-proxy
  roles:
  - dch-proxy
  tasks:
  - name: ensure haproxy is running
    service:
      name: haproxy
      state: started
    tags:
    - service
  - name: ensure firewall is configured for haproxy
    firewalld:
      service: '{{ item }}'
      immediate: true
      permanent: true
      state: enabled
    loop:
    - http
    - https
    tags:
    - firewalld