diff --git a/.ansible-sign/sha256sum.txt b/.ansible-sign/sha256sum.txt
index 8bffd26..41209ca 100644
--- a/.ansible-sign/sha256sum.txt
+++ b/.ansible-sign/sha256sum.txt
@@ -22,7 +22,7 @@ e0aa583a3faf802922a6cb66c3e2fa5906105a619a6d9821f47c6a068e728570  jenkins.yml
 d26a0f12ebb5835b5aa36074b24addf52fdca91939d97244eb682bb3bd05545e  roles/jenkins_setup/files/shadowman.xml
 3ce37f28b0b4cd83a86440fdfbc1148f6a61125dd4dcf900b953778a588ac12b  roles/jenkins_setup/tasks/main.yml
 fde421bd02e9d5d96effcbef92b4657f2ed9283855cebafcb3246c4829882382  roles/kafka/handlers/main.yml
-08c452dd95aa807402eabb90952b45036d1831e7b051ef443cc23d286fe7692a  roles/kafka/tasks/main.yml
+70078a53895da6af9f14f6d64ab7074aa6f79af2bb3c5777c2d8d78e3a215583  roles/kafka/tasks/main.yml
 2d12114b12a76da493a951ed2c1abcd3d2d3e5a1ca0dcb0943fbc91665f5f91a  roles/prometheus/defaults/main.yml
 a8355ca3078663433c90e991a1a9622ae2d5b911696aef4a62701ed6a454690c  roles/prometheus/handlers/main.yml
 4116ff338c5ffed270d770729ff19e4f0a85365be1745f282fd35f50ca660fd6  roles/prometheus/tasks/main.yml
diff --git a/.ansible-sign/sha256sum.txt.sig b/.ansible-sign/sha256sum.txt.sig
index 0ee09dc..3df0f83 100644
--- a/.ansible-sign/sha256sum.txt.sig
+++ b/.ansible-sign/sha256sum.txt.sig
@@ -1,14 +1,14 @@
 -----BEGIN PGP SIGNATURE-----
 
-iQGzBAABCAAdFiEE/bJvyFHKKJdaZDOLTiIiIXrUDNEFAmUudz8ACgkQTiIiIXrU
-DNFx5Qv+NjhzzV8iEp32OVUbPjkeC+dcaaSXFAAiEvsqaFn5Hja/kIUy0DFlM4WU
-/mcoIPWAvHv9n4j4yTZ5mInaI668nxQ/+vH0MiiO9iZmQDcNt9GLVZ59MqgmeXBF
-ZPm+gw6pvmzvb86VQPIM4HtlTbzJ5pEFd5VEXOfB+VSS2SbzG/xyEm3Dk1hN42sO
-fXrJ6LdRQIO8SgvBf3+CX5tds0/7f8A1bCOsxw2kshUTH9PSlD7xxU2GV2DJfQUZ
-Qzkhh9MJvLBgRN2Ug58DGSm/JUp4XvcM3/3So2F4gF79XiU2dTIt3QlgfpCJ8Ho0
-3xViG7JssS/nevtO2aGQPc1aQiKfmOrbY2f+QuxZKGz1/FzlMTDgmiV8x2SwjA54
-H2aE4f4z3ol3cCioJHfIxxEb65jjr/I12gMFIjILpJU0HXXN8i8yJFR8MxWDwOP7
-C1+1LclejsQWpeVRBPFlASuBABjodBo/fv5EnI64fEqFMquBKh8VH/iFJSyorbNz
-n5vOMEz8
-=DZdl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+=O6x+
 -----END PGP SIGNATURE-----
diff --git a/roles/kafka/tasks/main.yml b/roles/kafka/tasks/main.yml
index 1a848ae..5e69ed6 100644
--- a/roles/kafka/tasks/main.yml
+++ b/roles/kafka/tasks/main.yml
@@ -7,6 +7,23 @@
       - java
     state: present
 
+- name: Open Firewalld for Kafka
+  ansible.posix.firewalld:
+    port: 9092/tcp
+    permanent: true
+    state: enabled
+  notify: "Restart Firewalld"
+
+- name: Open Firewalld for ZooKeeper
+  ansible.posix.firewalld:
+    port: 2181/tcp
+    permanent: true
+    state: enabled
+  notify: "Restart Firewalld"
+
+- name: Force all notified handlers to run at this point
+  ansible.builtin.meta: flush_handlers
+
 - name: Ensure "messaging" network exists
   containers.podman.podman_network:
     name: messaging
@@ -37,13 +54,6 @@
       - "9092:9092"
     network: messaging
 
-- name: Open Firewalld for Kafka
-  ansible.posix.firewalld:
-    port: 9092/tcp
-    permanent: true
-    state: enabled
-  notify: "Restart Firewalld"
-
 - name: Extract kafka tar
   ansible.builtin.unarchive:
     src: 'https://downloads.apache.org/kafka/3.6.0/kafka_2.13-3.6.0.tgz'