---
- name: "Apply Custom Firewall Rules to every Ansible-Managed Server"
  hosts: servers

  tasks:
# Create Firewall Rules
    # Cockpit - ALL Servers
  - name: "Create Firewall Rule - SSH"
    ansible.posix.firewalld:
      zone: public
      service: cockpit
      permanent: yes
      state: enabled
...