gistfile1.txt

---
- name: Configure UFW for baseline access
  ufw: rule=allow
       from_ip="{{ item.ip }}"
       to_port="{{ item.port }}"
       state=enabled
  with_items:
    - { ip: "10.0.0.0/8", port: "any" }
    - { ip: "172.16.0.0/12", port: "any" }
    - { ip: "192.168.0.0/16", port: "any" }
    - { ip: bellevue_office_ip, port: "any" }
  sudo: yes