pez-infra/ansible/roles/common/handlers/main.yml
Rasmus Wejlgaard 1b3cf7401f Remove stale cloudflared service from copenhagen-a (PESO-138)
cloudflared was retired in #56 when Caddy + Authelia replaced Cloudflare
Tunnels, but copenhagen-a was unreachable at the time so its
cloudflared.service was never stopped and is still running.

Add a cleanup task to the common role that stops, disables and purges
cloudflared wherever the unit lingers. Gated on the unit file existing so
it self-targets copenhagen-a and is a no-op everywhere else, and explicitly
excludes copenhagen-c, which legitimately runs a hand-configured tunnel.
2026-06-07 11:43:58 +01:00

13 lines
235 B
YAML

---
- name: Restart sshd
ansible.builtin.service:
name: sshd
state: restarted
- name: Reload ufw
community.general.ufw:
state: reloaded
- name: Reload systemd daemon
ansible.builtin.systemd:
daemon_reload: true