From f150d9316127f0e9a2991cff6b103c674ece15c8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Murat=20=C3=96ZDEM=C4=B0R?= <muratozdemir@tarla.io>
Date: Thu, 14 May 2026 10:57:28 +0300
Subject: [PATCH] fix(firewall): open ports 80 and 443 in firewalld drop zone

The docker role only opened Swarm ports (2377, 7946, 4789).
HTTP and HTTPS were missing, making SWAG unreachable from outside.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 ansible/roles/docker/tasks/main.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ansible/roles/docker/tasks/main.yml b/ansible/roles/docker/tasks/main.yml
index 60b01f2..4f3291a 100644
--- a/ansible/roles/docker/tasks/main.yml
+++ b/ansible/roles/docker/tasks/main.yml
@@ -41,6 +41,8 @@
     immediate: yes
     state: enabled
   loop:
+    - 80/tcp
+    - 443/tcp
     - 2377/tcp
     - 7946/tcp
     - 7946/udp