---
- name: '[firewall] restart service'
  become: true
  ansible.builtin.systemd_service:
    name: nftables.service
    enabled: true
    state: restarted

- name: '[ssh] restart service'
  become: true
  ansible.builtin.systemd_service:
    name: sshd.service
    enabled: true
    state: restarted

- name: '[clamav] daemon reload'
  become: true
  ansible.builtin.systemd_service:
    daemon_reload: true

- name: '[freshclam] restart service'
  become: true
  ansible.builtin.systemd_service:
    name: clamav-freshclam.service
    enabled: true
    state: restarted

- name: '[clamd] wait for signatures'
  become: true
  ansible.builtin.wait_for:
    path: /var/lib/clamav/main.cvd
    timeout: 600
    state: present

- name: '[clamd] restart service'
  become: true
  ansible.builtin.systemd_service:
    name: clamav-clamd.service
    enabled: true
    state: restarted

- name: '[apt] update sources'
  become: true
  ansible.builtin.apt:
    update_cache: true
    force_apt_get: true

- name: '[system] reload sysctl configuration'
  become: true
  ansible.builtin.command:
    cmd: sysctl --system