tasks to comment out app protect conf lines

Author: aknot242

tasks/configure-app-protect.yml

@@ -31,7 +31,26 @@
     src: "{{ nginx_conf_template.template_file }}"
     dest: "{{ nginx_conf_template.out_file_location }}{{ nginx_conf_template.out_file_name }}"
     backup: true
-  when: nginx_conf_template_enable
+  when:
+    - nginx_conf_template_enable
+    - app_protect_state != "absent"
+
+- name: "Remove NGINX App Protect"
+  block:
+     
+    - name: Comment out NGINX App Protect module reference in nginx.conf
+      replace:
+        path: /etc/nginx/nginx.conf
+        regexp: '^([ \t]*load_module.*ngx_http_app_protect_module.so;)'
+        replace: '# \1'
+
+    - name: Comment out NGINX App Protect directives in nginx.conf
+      replace:
+        path: /etc/nginx/nginx.conf
+        regexp: '^([ \t]*app_protect_)'
+        replace: '# \1'
+
+  when: app_protect_state == "absent"
 
 - name: "Reload NGINX"
   debug:

tasks/install-app-protect.yml

@@ -16,5 +16,3 @@
 
 - name: "(Install: Linux) Install NGINX Plus"
   import_tasks: install-app-protect-linux.yml
-  # should not be needed, as a check is occurring for this in a higher level playbook is occuring 
-  # when: ansible_os_family in nginx_plus_linux_families

tasks/main.yml

@@ -68,9 +68,7 @@
 
     - name: "Configure NGINX App Protect"
       import_tasks: configure-app-protect.yml
-      when: 
-        - supported_os
-        - app_protect_configure
+      when: app_protect_configure
 
   when: app_protect_state != "absent"
 
@@ -80,4 +78,8 @@
     - name: "Remove NGINX App Protect"
       import_tasks: install-app-protect.yml
 
+    - name: "Disable NGINX App Protect Configuration"
+      import_tasks: configure-app-protect.yml
+      when: app_protect_configure
+
   when: app_protect_state == "absent"