firewall-cmd --zone=public --add-port=80/tcp --permanent
systemctl stop firewalld.service systemctl start firewalld.service