- name: generate firewall file
  template:
      src: firewall.j2
      dest: /etc/config/firewall
  notify: reload firewall