---
- name: "enable sshd"
  systemd:
    name: sshd
    enabled: yes

- name: "enable chronyd"
  systemd:
    name: chronyd
    enabled: yes

- name: "set chrony.conf"
  template:
    src: "{{ role_path }}/templates/chrony.conf.j2"
    dest: /usr/lib/tmpfiles.d/chrony.conf
  tags: template

- name: "disable ntpd"
  systemd:
    name: ntpd
    enabled: no

#Service Optimization
- name: "enable snmpd"
  systemd:
    name: snmpd
    enabled: yes

- name: "enable snmptrapd"
  systemd:
    name: snmptrapd
    enabled: yes

- name: "disenable abrt-ccpp"
  systemd:
    name: abrt-ccpp
    enabled: no

- name: "disenable abrt-oops"
  systemd:
    name: abrt-oops
    enabled: no

- name: "disenable abrtd"
  systemd:
    name: abrtd
    enabled: no

- name: "disenable dmraid-activation"
  systemd:
    name: dmraid-activation
    enabled: no

- name: "disenable postfix"
  systemd:
    name: postfix
    enabled: no

- name: "set sshd UseDns no"
  shell: sed -i 's/#UseDNS yes/UseDNS no/g' /etc/ssh/sshd_config

- name: "update initramfs"
  shell: dracut --force -v /boot/initramfs-5.4.159-1.el7.elrepo.x86_64.img 5.4.159-1.el7.elrepo.x86_64