various fixes & updates

tasks/install.yml

@@ -16,20 +16,23 @@
     dest: "/usr/local/bin/firewall"
     mode: "0755"
     force: yes
+    validate: /bin/sh -n %s
   notify:
     - restart firewall
 
 - name: firewall | copy systemd unit file
   copy:
     src: "firewall.service"
-    dest: "/lib/systemd/system/firewall.service"
+    dest: "/etc/systemd/system/firewall.service"
     mode: "0644"
     force: yes
   notify:
+    - reload systemd
     - restart firewall
 
-- name: fireall | enable on boot
-  systemd: 
+- name: firewall | enable and start service
+  systemd:
     name: firewall
     enabled: yes
     masked: no
+    state: started