fuck it. firewalld disabled.

linux/compliance.yaml

@@ -36,13 +36,13 @@
         state: present
         validate: 'visudo -cf %s'
 
-    # Configure firewalld (if installed) to be disabled (especially if an internal server.) Firewall rules are managed by UniFi.
-    - name: Stop and disable firewalld.
-      service:
-       name: firewalld
-       state: stopped
-       enabled: false
-      when: "'firewalld' in services"
+    # # Configure firewalld (if installed) to be disabled (especially if an internal server.) Firewall rules are managed by UniFi.
+    # - name: Stop and disable firewalld.
+    #   service:
+    #    name: firewalld
+    #    state: stopped
+    #    enabled: false
+    #   when: "'firewalld' in services"
 
     # User account (nhadmin) configuration, for sysadmin use
     - name: Create user nhadmin.