From 9d9da31649f20536de153f5a4c94f965895f69b1 Mon Sep 17 00:00:00 2001
From: "Andreas B. Mundt" <andi@debian.org>
Date: Wed, 27 Nov 2019 18:31:52 +0100
Subject: [PATCH] Allow apt-cacher-ng in firewalld.

---
 roles/apt-cacher/tasks/main.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/roles/apt-cacher/tasks/main.yml b/roles/apt-cacher/tasks/main.yml
index bb9cc51..128d1fd 100644
--- a/roles/apt-cacher/tasks/main.yml
+++ b/roles/apt-cacher/tasks/main.yml
@@ -23,4 +23,11 @@
     replace: 'd-i mirror/http/proxy string http://{{ ansible_hostname }}:3142/'
   when: preseedcfg.stat.exists
 
+- name: allow apt-cacher-ng service in firewalld
+  firewalld:
+    zone: internal
+    port: 3142/tcp
+    permanent: yes
+    state: enabled
+
 - meta: flush_handlers