---
- name: allow NUT from the truenas slave only
  become: true
  ansible.posix.firewalld:
    rich_rule: >-
      rule family="ipv4" source address="{{ ups_slave_ip }}/32"
      port port="{{ ups_listen_port }}" protocol="tcp" accept
    permanent: true
    immediate: true
    state: enabled
  notify: restart firewalld
  tags: [ups, firewall]