---
- name: Disable NFS versions 2 and 3
  ansible.builtin.lineinfile:
    path: /etc/nfs.conf
    line: "{{ item }}=n"
    regexp: '^(#\s*)?{{ item }}=.*'
  with_items:
    - vers2
    - vers3
  notify: Restart nfs-server

- name: Disable NFS over UDP
  ansible.builtin.lineinfile:
    path: /etc/nfs.conf
    line: "udp=n"
    regexp: '^(#\s*)?udp=.*'
    insertbefore: vers2=n
  notify: Restart nfs-server

- name: Install home/role autocreate scripts
  ansible.builtin.copy:
    dest: "/usr/local/sbin/{{ item }}"
    src: "{{ item }}.sh"
    mode: "0755"
    owner: root
    group: "{{ ansible_wheel }}"
  with_items:
    - mknfshomedir
    - mknfsroledir

- name: Add home/role autocreate cron jobs
  ansible.builtin.cron:
    name: "{{ item }}"
    user: root
    job: "/usr/local/sbin/{{ item }}"
  with_items:
    - mknfshomedir
    - mknfsroledir

- name: Enable services
  ansible.builtin.service:
    name: nfs-server
    state: started
    enabled: true