---
- name: Installer auditd
  ansible.builtin.apt:
    name:
      - auditd
      - audispd-plugins
    state: present

- name: Déployer les règles auditd Set-OPS
  ansible.builtin.template:
    src: 99-setops.rules.j2
    dest: /etc/audit/rules.d/99-setops.rules
    owner: root
    group: root
    mode: "0640"
  notify: Restart auditd
  when: auditd_enabled | bool

- name: Activer auditd
  ansible.builtin.systemd:
    name: auditd
    enabled: true
    state: started
  when: auditd_enabled | bool
  failed_when: false