- copy: 
   src: files/firewall.sh 
   dest: /root/firewall/firewall.sh
   owner: root
   group: root
   mode: 0700