# 'service: name=... state=started' tasks should NOT run if there is a
# corresponding state=restarted handler.  (Register the task notifying
# the handler, and add a conditional.)
---
- name: systemctl daemon-reload
  command: /bin/systemctl daemon-reload

- name: Refresh hostname
  service: name=hostname.sh state=restarted

- name: apt-get update
  apt: update_cache=yes

- name: Restart unbound
  service: name=unbound state=restarted

- name: Update rkhunter's data file
  command: /usr/bin/rkhunter --propupd

- name: Update firewall
  command: /usr/local/sbin/update-firewall.sh -c

- name: Restart fail2ban
  service: name=fail2ban state=restarted

- name: Restart IPsec
  service: name=ipsec state=restarted

- name: Restart rsyslog
  service: name=rsyslog state=restarted

- name: Restart ntp
  service: name=ntp state=restarted

- name: Restart Postfix
  service: name=postfix state=restarted

- name: Reload Postfix
  service: name=postfix state=reloaded

- name: Restart bacula-fd
  service: name=bacula-fd state=restarted

- name: Restart munin-node
  service: name=munin-node state=restarted

- name: Restart freshclam
  service: name=clamav-freshclam state=restarted

- name: Update initramfs
  command: /usr/sbin/update-initramfs -u