Without making the firewall changes permanent, when a server tries to renew its certificate after rebooting, it will fail as the ACME server cannot connect to the HTTP port.
8 lines
189 B
YAML
8 lines
189 B
YAML
- name: restart samba-cert-renew.timer
|
|
systemd:
|
|
name: samba-cert-renew.timer
|
|
state: restarted
|
|
|
|
- name: save firewalld-configuration
|
|
command: firewall-cmd --runtime-to-permanent
|