From 279c1699e2b12858aec0e318a86f69d53b27a7c3 Mon Sep 17 00:00:00 2001
From: Jonathan DeMasi <me@jthan.io>
Date: Sun, 25 Jan 2026 23:34:43 -0700
Subject: [PATCH] remove ldaps since we use starttls on 389

---
 ansible/roles/openldap_server/tasks/install.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ansible/roles/openldap_server/tasks/install.yaml b/ansible/roles/openldap_server/tasks/install.yaml
index ec456b2..b1a270c 100644
--- a/ansible/roles/openldap_server/tasks/install.yaml
+++ b/ansible/roles/openldap_server/tasks/install.yaml
@@ -27,7 +27,7 @@
 - name: Permanently enable ldaps service firewalld
   ansible.posix.firewalld:
     service: ldaps
-    state: enabled
+    state: disabled
     permanent: true
     immediate: true
     offline: true