moved to handlers

Author: magicalyak

handlers/main.yml

@@ -3,13 +3,6 @@
 - name: "(Handler: All OSs) Run NGINX"
   block:
 
-    - name: "(Handler: All OSs) Set App Protect Permissions"
-      file:
-        path: /opt/app_protect
-        owner: nginx
-        group: nginx
-        recurse: yes
-
     - name: "(Handler: All OSs) Start NGINX"
       service:
         name: nginx
@@ -30,3 +23,7 @@
 - name: "(Handler: All OSs) Check NGINX"
   command: "nginx -t"
   changed_when: false
+
+- name: "(Handler: All OSs) Enable SELinux"
+  include_tasks: configure-selinux.yml
+  notify: "(Handler: All OSs) Restart NGINX"

tasks/prerequisites/setup-selinux.yml renamed to tasks/configure-selinux.yml

@@ -109,7 +109,7 @@
     creates: "{{ app_protect_tempdir }}/nginx-plus-module-appprotect.pp"
   changed_when: false
 
-- name: "(Install: SELinux: Module) Import NGINX Plus App Protect Module"
+- name: "(Install: SELinux: Module) Import NGINX Plus App Protect Module"  # noqa 503
   command: "semodule -i {{ app_protect_tempdir }}/nginx-plus-module-appprotect.pp"
   changed_when: false
   when: app_protect_module.changed
@@ -118,4 +118,4 @@
   selinux:
     state: enforcing
     policy: targeted
-  changed_when: false
+  changed_when: false

tasks/prerequisites/setup-centos.yml

@@ -5,5 +5,6 @@
     state: present
 
 - name: "(Install: CentOS) Setup SELinux"
-  import_tasks: setup-selinux.yml
+  command: /bin/true
+  notify: "(Handler: All OSs) Enable SELinux"
   when: app_protect_selinux