iptables_prom.yml

---
- name: Firewall rules for Prometheus
  hosts: nodes
  tasks:
  
    - name: Ensure IPtables rule exists
      lineinfile:
        dest: /etc/sysconfig/iptables
        state: present
        line: "{{ item }}"
        insertbefore: '^COMMIT'
        backup: yes
      with_items:
        - '-A OS_FIREWALL_ALLOW -p tcp -m state --state NEW -m tcp --dport 9100 -j ACCEPT' 
        - '-A OS_FIREWALL_ALLOW -p tcp -m state --state NEW -m tcp --dport 1936 -j ACCEPT' 
        - '-A OS_FIREWALL_ALLOW -p tcp -m state --state NEW -m tcp --dport 8443 -j ACCEPT' 

    - name: Ensure IPtables is restarted
      systemd:
        state: restarted
        name: iptables