---
- name: update grub
  command: update-grub

- name: reboot
  reboot:

- name: apt update
  apt:
    update_cache: true

- name: daemon reload
  systemd:
    daemon_reload: true

- name: reload sshd
  systemd:
    name: ssh
    state: reloaded

- name: reload nginx
  systemd:
    name: nginx
    state: reloaded

- name: persist iptables
  shell: "{{ item.c }}-save > /etc/iptables/rules.{{ item.ip }}"
  with_items:
    - { c: iptables, ip: v4 }
    - { c: ip6tables, ip: v6 }