- name: Open PostgreSQL port in firewall
  firewalld:
    port: 5432/tcp
    permanent: true
    state: enabled
  become: true

- name: Reload firewalld
  systemd:
    name: firewalld
    state: reloaded
  become: true