Настраиваем файрволл firewalld без команд

# cat /etc/firewalld/zones/web.xml
<?xml version="1.0" encoding="utf-8"?>
<zone>
  <short>Web</short>
  <description>For web-server</description>
  <service name="http"/>
  <service name="ssh"/>
  <service name="https"/>
  <port protocol="tcp" port="8080"/>
</zone>