From 1bc45b11064b8773f9b79ad0f90779bbb13b334f Mon Sep 17 00:00:00 2001
From: James Graham <J.Graham@software.ac.uk>
Date: Mon, 30 Mar 2020 20:30:37 +0100
Subject: [PATCH] deploy: Only configure firewall if it's already running

---
 roles/webserver/tasks/main.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/roles/webserver/tasks/main.yml b/roles/webserver/tasks/main.yml
index cc1504c..aa8c769 100644
--- a/roles/webserver/tasks/main.yml
+++ b/roles/webserver/tasks/main.yml
@@ -223,6 +223,9 @@
     - uwsgi
     - rh-nginx114-nginx
 
+- name: Populate service facts
+  service_facts:
+
 - name: Open webserver ports on firewall
   firewalld:
     service: '{{ item }}'
@@ -232,4 +235,4 @@
   loop:
     - http
     - https
-  when: vagrant_dir.stat.exists == False
+  when: ansible_facts.services['firewalld.service'] is defined and ansible_facts.services['firewalld.service'].state == 'running'