diff --git a/roles/kubernetes/tasks/Rocky.yml b/roles/kubernetes/tasks/Rocky.yml
index bc07db6..14b1dcf 100644
--- a/roles/kubernetes/tasks/Rocky.yml
+++ b/roles/kubernetes/tasks/Rocky.yml
@@ -156,28 +156,28 @@
         name: kubelet
         enabled: yes
         state: started
-    - name: Ensure firewalld is running
-      ansible.builtin.service:
-        name: firewalld
-        state: started
-        enabled: true
-      when: inventory_hostname.endswith('-vm01.home.lan')
+    # - name: Ensure firewalld is running
+    #   ansible.builtin.service:
+    #     name: firewalld
+    #     state: started
+    #     enabled: true
+    #   when: inventory_hostname.endswith('-vm01.home.lan')
 
-    - name: Open Kubernetes API server port (6443)
-      ansible.posix.firewalld:
-        port: 6443/tcp
-        permanent: yes
-        state: enabled
-        immediate: yes
-      when: inventory_hostname.endswith('-vm01.home.lan')
+    # - name: Open Kubernetes API server port (6443)
+    #   ansible.posix.firewalld:
+    #     port: 6443/tcp
+    #     permanent: yes
+    #     state: enabled
+    #     immediate: yes
+    #   when: inventory_hostname.endswith('-vm01.home.lan')
 
-    - name: Open etcd ports (2379-2380)
-      ansible.posix.firewalld:
-        port: 2379-2380/tcp
-        permanent: yes
-        state: enabled
-        immediate: yes
-      when: inventory_hostname.endswith('-vm01.home.lan')
+    # - name: Open etcd ports (2379-2380)
+    #   ansible.posix.firewalld:
+    #     port: 2379-2380/tcp
+    #     permanent: yes
+    #     state: enabled
+    #     immediate: yes
+    #   when: inventory_hostname.endswith('-vm01.home.lan')
 
     - name: Open kubelet and scheduler ports (10250-10252)
       ansible.posix.firewalld: