---

- name: Set correct SELinux context
  sefcontext:
    target: "{{ nomad_root_dir }}/log(/.*)?"
    setype: httpd_log_t
    state: present
  register: nomad_fcontext
  when:
    - nomad_conf.tls.http
    - nomad_conf.server.enabled
  tags: nomad

- name: Fix context for log dir
  command: restorecon -R {{ nomad_root_dir }}/log
  changed_when: false
  tags: nomad

- name: Allow nginx to bind on other ports
  seboolean: name=nis_enabled state=true persistent=true
  tags: nomad