Update to 2022-03-07 16:00

roles/nginx/tasks/install.yml

@@ -1,8 +1,10 @@
 ---
 
-- include: install_openresty.yml
+- include_tasks: install_openresty.yml
   when: nginx_openresty
+  tags: always
 
-- include: install_nginx.yml
+- include_tasks: install_nginx.yml
   when: not nginx_openresty
+  tags: always
 

roles/nginx/tasks/iptables.yml

@@ -4,5 +4,4 @@
     name: nginx_ports
     state: "{{ (nginx_src_ip | length > 0) | ternary('present','absent') }}"
     rules: "-A INPUT -m state --state NEW -p tcp -m multiport --dports {{ (nginx_ports + nginx_ssl_ports) | join(',') }} -s {{ nginx_src_ip | join(',') }} -j ACCEPT\n"
-  when: iptables_manage | default(True)
-  tags: [firewall,web]
+  tags: firewall,web

roles/nginx/tasks/main.yml

@@ -1,12 +1,35 @@
 ---
-- include: install.yml
-- include: facts.yml
-- include: ssl.yml
-- include: dir.yml
-- include: conf.yml
-- include: letsencrypt.yml
-- include: selinux.yml
-- include: iptables.yml
-- include: htpasswd.yml
-- include: service.yml
-- include: filebeat.yml
+- include_tasks: install.yml
+  tags: always
+
+- include_tasks: facts.yml
+  tags: always
+
+- include_tasks: ssl.yml
+  tags: always
+
+- include_tasks: dir.yml
+  tags: always
+
+- include_tasks: conf.yml
+  tags: always
+
+- include_tasks: letsencrypt.yml
+  tags: always
+
+- include_tasks: selinux.yml
+  when: ansible_selinux.stats == 'enabled'
+  tags: always
+
+- include_tasks: iptables.yml
+  when: iptables_manage | default(True)
+  tags: always
+
+- include_tasks: htpasswd.yml
+  tags: always
+
+- include_tasks: service.yml
+  tags: always
+
+- include_tasks: filebeat.yml
+  tags: always

roles/nginx/tasks/selinux.yml

@@ -3,12 +3,10 @@
   seboolean: name={{ item }} state=True persistent=True
   with_items:
     - httpd_can_network_connect
-  when: ansible_selinux.status == 'enabled'
   tags: web
 
 - name: Allow nginx to bind on ports
   seport: ports={{ (nginx_ports + nginx_ssl_ports ) | join(',') }} proto=tcp setype=http_port_t state=present
-  when: ansible_selinux.status == 'enabled'
   tags: web
 
 - name: Ensure correct context on cache