---
- name: "Apply Custom Firewall Rules to every Ansible-Managed Raspberry"
  hosts: rpis

  tasks:
# Create Firewall Rules
    # SSH - ALL
  - name: "Create Firewall Rule - SSH"
    ansible.posix.firewalld:
      zone: public
      service: ssh
      permanent: yes
      state: enabled
...