---
- name: Deploy firewall rsyslog
  template:
    src: rsyslog.d/10-firewall.conf.j2
    dest: /etc/rsyslog.d/10-firewall.conf
    mode: 0644
    owner: root
    group: root

- name: Create firewall log directory
  file:
    path: /var/log/firewall
    mode: 0755
    owner: root
    group: root
    state: directory

- name: Deploy firewall logrotate
  template:
    src: logrotate.d/firewall.j2
    dest: /etc/logrotate.d/firewall
    mode: 0644
    owner: root
    group: root