use linux-system-roles for docker firewall config

plays/nas-services.yml

@@ -21,11 +21,6 @@
     backups: containers
     backups_ignore: /mergerfs
 
-    firewall_ports:
-      - 8080/tcp
-      - 8081/tcp
-      - 9091/tcp
-
     container_user: "{{ vaulted_media_user }}"
     container_uid: "{{ vaulted_media_uid }}"
     container_group: "{{ vaulted_media_group }}"
@@ -95,3 +90,12 @@
     firewall:
       - service: grafana
         state: enabled
+
+      - port: 8080/tcp
+        state: enabled
+
+      - port: 8081/tcp
+        state: enabled
+
+      - port: 9091/tcp
+        state: enabled