vm-ansible/host_vars/postgres.yaml

---
firewall:
  - port: "5432"
    proto: tcp
    interface: "eth0"
...