general method for adding configuration files

tasks/post_install.yml

@@ -50,20 +50,16 @@
     service: "swclock"
   - runlevel: "default"
     service: "ntpd"
-- name: "Install firewall rules."
+- name: "Install configuration files."
   template:
-    src: "templates/etc/iptables/{{ item }}.j2"
-    dest: "/mnt/etc/iptables/{{ item }}"
+    src: "templates/{{ item }}"
+    dest: "{{ item }}"
+    mode: "640"
   loop:
-  - rules-save
-  - rules6-save
-- name: "And blocklists."
-  template:
-    src: "templates/etc/ipset.d/{{ item }}.j2"
-    dest: "/mnt/etc/ipset.d/{{ item }}"
-  loop:
-  - blocklist4
-  - blocklist6
+  - /etc/iptables/rules6-save
+  - /etc/iptables/rules-save
+  - /etc/ipset.d/blocklist4
+  - /etc/ipset.d/blocklist6
 - name: "Create NTP directories."
   file:
     state: "directory"