fix: retry to apply fw rules

roles/nfs-server/tasks/main.yml

@@ -37,3 +37,7 @@
     direction: in
     comment: "Network File System (NFS)"
   with_items: "{{ nfs_server_firewall_allowed_sources | default([]) }}"
+  retries: 5
+  delay: 2
+  register: ufw_result
+  until: ufw_result is succeeded

roles/nginx/tasks/main.yml

@@ -53,6 +53,10 @@
     port: "80"
     proto: tcp
     comment: Nginx HTTP
+  retries: 5
+  delay: 2
+  register: ufw_result
+  until: ufw_result is succeeded
 
 - name: Allow HTTPS traffic through firewall
   community.general.ufw:
@@ -60,6 +64,10 @@
     port: "443"
     proto: tcp
     comment: Nginx HTTPS
+  retries: 5
+  delay: 2
+  register: ufw_result
+  until: ufw_result is succeeded
 
 - name: Enable and start nginx service
   ansible.builtin.systemd:

roles/ntpd/tasks/main.yml

@@ -47,3 +47,7 @@
     direction: in
     comment: "NTP traffic"
   loop: "{{ ntp_firewall_allowed_sources | default([]) }}"
+  retries: 5
+  delay: 2
+  register: ufw_result
+  until: ufw_result is succeeded

roles/podman/tasks/main.yml

@@ -7,6 +7,11 @@
       - crun
     state: present
 
+- name: Enable Podman service
+  ansible.builtin.systemd:
+    name: podman.service
+    enabled: true
+
 - name: Create projects directory
   ansible.builtin.file:
     path: "{{ podman_projects_dir }}"

roles/postgres/tasks/main.yml

@@ -66,6 +66,10 @@
     direction: in
     comment: "PostgreSQL"
   loop: "{{ postgres_firewall_allowed_sources }}"
+  retries: 5
+  delay: 2
+  register: ufw_result
+  until: ufw_result is succeeded
 
 - name: Enable and start PostgreSQL service
   ansible.builtin.systemd:

roles/unbound/tasks/main.yml

@@ -154,3 +154,7 @@
     src: "{{ item }}"
     direction: in
   loop: "{{ unbound_firewall_allowed_sources | default([]) }}"
+  retries: 5
+  delay: 2
+  register: ufw_result
+  until: ufw_result is succeeded

roles/valkey/tasks/main.yml

@@ -56,3 +56,7 @@
     direction: in
     comment: "Valkey"
   loop: "{{ valkey_firewall_allowed_sources }}"
+  retries: 5
+  delay: 2
+  register: ufw_result
+  until: ufw_result is succeeded

roles/wireguard/tasks/main.yml

@@ -53,6 +53,10 @@
     proto: udp
     direction: in
     comment: Wireguard VPN
+  retries: 5
+  delay: 2
+  register: ufw_result
+  until: ufw_result is succeeded
 
 - name: Start and enable service
   ansible.builtin.service: