--- - name: setup server include_tasks: server.yml when: mariadb_install_server is truthy - name: setup client include_tasks: client.yml when: mariadb_install_client is truthy - name: install firewall rules become: true template: src: ../templates/nftables.d/mariadb.nft.j2 dest: /etc/nftables.d/mariadb.nft mode: '0600' register: nft_rule - name: load firewall rules become: true ansible.builtin.command: /usr/sbin/nft -f /etc/nftables.d/mariadb.nft when: nft_rule.changed