Add firewalld configuration role, and have services that need it depend on it.

roles/ensure_postfix/meta/main.yml

@@ -45,6 +45,7 @@ galaxy_info:
     #
     # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
     #       Maximum 20 tags per role.
-dependencies: []
+dependencies:
+  - role: ensure_firewalld
   # List your role dependencies here, one per line. Be sure to remove the '[]' above,
   # if you add dependencies to this list.

roles/ensure_postfix/tasks/main.yml

@@ -118,13 +118,13 @@
     - ansible_facts.packages["firewalld"] is defined
     - ansible_facts.packages["python3-firewall"] is defined
     - ensure_postfix is defined
-    - ensure_postfix.firewall_list is defined
-    - ensure_postfix.firewall_list is iterable
+    - ensure_postfix.firewalld_list is defined
+    - ensure_postfix.firewalld_list is iterable
   ansible.posix.firewalld:
     permanent: '{{ item.permanent }}'
     service: '{{ item.service }}'
     state: '{{ item.state }}'
-  loop: '{{ ensure_postfix.firewall_list }}'
+  loop: '{{ ensure_postfix.firewalld_list }}'
   loop_control:
     label: '{{ item.service }} will be {{ item.state }}'
   notify:

roles/ensure_postfix/vars/Fedora-42-default.yml

@@ -28,7 +28,7 @@ package_list:
     state: present
   - name: spamassassin
     state: present
-firewall_list:
+firewalld_list:
   - permanent: 'yes'
     service: smtp
     state: enabled

roles/ensure_postfix/vars/Fedora-43-default.yml

@@ -28,7 +28,7 @@ package_list:
     state: present
   - name: spamassassin
     state: present
-firewall_list:
+firewalld_list:
   - permanent: 'yes'
     service: smtp
     state: enabled

roles/ensure_postfix/vars/Fedora-44-default.yml

@@ -28,7 +28,7 @@ package_list:
     state: present
   - name: spamassassin
     state: present
-firewall_list:
+firewalld_list:
   - permanent: 'yes'
     service: smtp
     state: enabled