---
- name: Firewall | Open NFS and portmapper ports for Longhorn
  ansible.posix.firewalld:
    port: "{{ item }}"
    permanent: true
    state: enabled
    immediate: "{{ not ansible_check_mode }}"
  loop:
    - 2049/tcp   # NFS (RWX volumes and backups)
    - 111/tcp    # portmapper (NFS)
    - 111/udp    # portmapper (NFS)