Adding option for not configuring firewall

README.md

@@ -30,7 +30,7 @@ If the "base_core_hostname" variable is defined, it is recommended to set the an
 | base_core_ssh_permit_root_login              | Yes      | False         | True, False | Permits the use of root logins for ssh                                     |
 | base_core_timezone                           | No       | America/Boise |             | Defines the timezone to apply to the client                                |
 | base_core_web_management                     | Yes      | False         | True, False | Enables installation of the Cockpit web management package(s)              |
-
+| base_core_firewall_configure                 | No       | True          | True, False | Allows the firewall to be configured                                       |
 
 ## Example
 

roles/base/defaults/main.yml

@@ -17,6 +17,12 @@ base_core_management_user_disable_password: false
 # Install all available updates at runtime
 base_core_install_updates: true
 
+# Firewall
+# ========
+
+# Allows the firewall to be configured
+base_core_firewall_configure: true
+
 # Hostname
 # ========
 
@@ -65,7 +71,6 @@ base_core_cert_common_name: "{{ ansible_facts['nodename'] }}"
 # Defines the timezone to apply to the client
 base_core_timezone: "America/Boise"
 
-
 # Web Management
 # ==============
 

roles/base/tasks/debian.yml

@@ -36,5 +36,6 @@
     file: debian_firewall.yml
     apply:
       tags: firewall
+  when: base_core_firewall_configure == true
   tags:
   - firewall

roles/base/tasks/redhat.yml

@@ -37,5 +37,6 @@
     file: redhat_firewall.yml
     apply:
       tags: firewall
+  when: base_core_firewall_configure == true
   tags:
   - firewall