diff --git a/roles/samba/tasks/facts.yml b/roles/samba/tasks/facts.yml
index f0cee40..9ab2335 100644
--- a/roles/samba/tasks/facts.yml
+++ b/roles/samba/tasks/facts.yml
@@ -9,7 +9,7 @@
   tags: [cert,samba]
 
 - set_fact: samba_i_am_primary_dc={{ (inventory_hostname == samba_primary_dc and samba_role == 'dc') | ternary(True,False) }}
-  tags: samba
+  tags: samba,firewall
 
 - name: Merge custom password complexity rules with default ones
   set_fact: samba_pwd_policy={{ samba_base_pwd_policy | combine(samba_pwd_policy) }}