Wordsmithing around the firewall rules. And punt Systemd timers.

Wordsmithing around the firewall rules.  And punt Systemd timers.

Replacing a cron job, esp. one you wanted email from (in the event of
a failure, or whenever), is a hassle with Systemd timers.  You will
need webupdate.timer, webupdate.service, webupdate-fail.service, and
/usr/local/sbin/webupdate-fail.  5 lines of Ansible become 100.