---
firewalld_add:
  - name: public
    interfaces:
      - ens3
    services:
      - http
      - https
    ports:
      - 26657/tcp
      - 26656/tcp
      - 1317/tcp

  - name: trusted
    sources:
      - {{ cluster_control_ip }}