diff --git a/host_vars/firewall.yml b/host_vars/firewall.yml
new file mode 100644
index 0000000..4f60cd9
--- /dev/null
+++ b/host_vars/firewall.yml
@@ -0,0 +1,11 @@
+---
+
+firewall_services:
+  - http
+  - https
+
+#firewall_ports:
+#  - 1337/tcp
+#  - 42/udp
+
+# uncomment and change if necessary
diff --git a/roles/firewalld/tasks/.main.yml.swp b/roles/firewalld/tasks/.main.yml.swp
new file mode 100644
index 0000000..0bc45f0
Binary files /dev/null and b/roles/firewalld/tasks/.main.yml.swp differ
diff --git a/site.yml b/site.yml
index fb8a4c0..cb64d60 100644
--- a/site.yml
+++ b/site.yml
@@ -5,4 +5,8 @@
   remote_user: root
   
   roles:
+    - apt
+    - apt-update-upgrade
+    - apt_listchanges
     - basic_common_settings
+    #- firewalld - not currently in use