---
- name: disable nfs versions 2 and 3
  lineinfile:
    path: /etc/nfs.conf
    line: "{{ item }}=n"
    regexp: '^(#\s*)?{{ item }}=.*'
  with_items:
    - vers2
    - vers3
  notify: restart nfs-server

- name: disable nfs over udp
  lineinfile:
    path: /etc/nfs.conf
    line: "udp=n"
    regexp: '^(#\s*)?udp=.*'
    insertbefore: vers2=n
  notify: restart nfs-server

- name: enable nfs server services
  service:
    name: nfs-server
    state: started
    enabled: true