---

- hosts: all
  tasks:

  - name: activer UFW
    community.general.ufw:
      state: enabled
      policy: allow

  - name: access port 22
    community.general.ufw:
      rule: allow
      port: '22'
      proto: ssh