1 files changed, 1 insertions(+), 2 deletions(-)

M roles/wireguard_vpn_server/tasks/main.yml

@@ 39,6 39,7 @@
 
 # TODO: Patch collection to support this directly
 - name: Enable forwarding
+  when: firewalld_masquerade.changed
   block:
     - name: Enable forwarding # noqa no-changed-when
       ansible.builtin.command: firewall-cmd --permanent --zone=public --add-forward


@@ 48,8 49,6 @@
         name: firewalld
         state: reloaded
 
-  when: firewalld_masquerade.changed
-
 - name: Copy firewalld wireguard_vpn service
   ansible.builtin.copy:
     src: wireguard_vpn.xml