---
- name: disable nfs versions 2 and 3
  lineinfile:
    path: /etc/nfs.conf
    line: "{{ item }}=n"
    regexp: '^(#\s*)?{{ item }}=.*'
  with_items:
    - vers2
    - vers3
  notify: restart nfs-server

- name: disable nfs over udp
  lineinfile:
    path: /etc/nfs.conf
    line: "udp=n"
    regexp: '^(#\s*)?udp=.*'
    insertbefore: vers2=n
  notify: restart nfs-server

- name: install home/role autocreate scripts
  copy:
    dest: "/usr/local/sbin/{{ item }}"
    src: "{{ item }}.sh"
    mode: 0755
    owner: root
    group: "{{ ansible_wheel }}"
  with_items:
    - mknfshomedir
    - mknfsroledir

- name: add home/role autocreate cron jobs
  cron:
    name: "{{ item }}"
    user: root
    job: "/usr/local/sbin/{{ item }}"
  with_items:
    - mknfshomedir
    - mknfsroledir

- name: enable nfs server services
  service:
    name: nfs-server
    state: started
    enabled: true