---
- name: 'reload vault service'
  become: true
  ansible.builtin.systemd_service:
    name: vault.service
    enabled: true
    state: reloaded

- name: 'restart vault service'
  become: true
  ansible.builtin.systemd_service:
    name: vault.service
    daemon_reload: true
    enabled: true
    state: restarted

- name: 'load firewall rules'
  become: true
  ansible.builtin.command: /usr/sbin/nft -f /etc/nftables.d/vault.nft
  when: nft_rules.changed