---
- name: Install
  package:
    name: firewalld
    state: present

- name: Start and activate
  service:
    name: firewalld
    state: started
    enabled: yes

- name: Block all ports
  firewalld:
    zone: public
    service: ssh
    permanent: yes
    state: enabled