---
- name: reload sshd
  ansible.builtin.service:
    name: ssh
    state: reloaded
  when: not ansible_check_mode

- name: restart fail2ban
  ansible.builtin.service:
    name: fail2ban
    state: restarted
  when: not ansible_check_mode

- name: restart journald
  ansible.builtin.service:
    name: systemd-journald
    state: restarted
  when: not ansible_check_mode

- name: reload sysctl
  ansible.builtin.command: sysctl --system
  changed_when: false
  when: not ansible_check_mode

- name: restart docker
  ansible.builtin.systemd:
    name: docker
    state: restarted
    daemon_reload: true
  when: not ansible_check_mode

- name: restart hostfilter firewall
  ansible.builtin.systemd:
    name: hostfilter-nft
    state: restarted
    daemon_reload: true
  when: not ansible_check_mode