windows: set up firewall

roles/windows/tasks/firewall_rule.yml

@@ -0,0 +1,14 @@
+- name: Allow service
+  win_firewall_rule:
+    name: "Allow incoming {{ service.name }} for {{ remoteip }}"
+    group: "{{ service.name }}"
+    action: allow
+    enabled: true
+    direction: in
+    protocol: "{{ service.protocol.value }}"
+    localport: "{{ service.ports | join(',') }}"
+    remoteip: "{{ remoteip }}"
+  loop: "{{ service | allowed_prefixes | default(['any'], true) }}"
+  loop_control:
+    label: "{{ remoteip }}"
+    loop_var: remoteip