- name: Set up resolv.conf
  template:
    src: etc_resolv.conf.j2
    dest: /etc/resolv.conf
    owner: root
    group: wheel
    mode: "0644"
  register: resolv_conf

- name: Make resolv.conf immutable
  shell: chflags schg /etc/resolv.conf
  when: resolv_conf.changed

- name: Restart networking if interface configuration changed
  shell: service netif restart && service routing restart
  when: rc_conf.changed or resolv_conf.changed

- name: Set up sshd
  template:
    src: etc_ssh_sshd_config.j2
    dest: /etc/ssh/sshd_config
    owner: root
    group: wheel
    mode: "0644"
  register: etc_sshd_config

- name: Start sshd
  service:
    name: sshd
    state: started
  register: started_sshd

- name: Restart sshd
  service:
    name: sshd
    state: restarted
  when: not started_sshd.changed and etc_sshd_config.changed

- name: Start syslogd
  service:
    name: syslogd
    state: started
  register: started_syslogd

- name: Restart syslogd
  service:
    name: syslogd
    state: restarted
  when: not started_syslogd.changed and rc_conf.changed

- name: Configure pf
  template:
    src: etc_pf.conf.j2
    dest: /etc/pf.conf
    owner: root
    group: wheel
    mode: "0644"
    backup: yes
  register: pf_conf

- name: Start pf
  service:
    name: pf
    state: started

- name: Reload pf rules
  shell: pfctl -f /etc/pf.conf
  when: pf_conf.changed

- name: Set up /usr/local/etc/do_dyndns_auth
  template:
    src: usr_local_etc_do_dyndns_auth.j2
    dest: /usr/local/etc/do_dyndns_auth
    owner: root
    group: wheel
    mode: "0600"

- name: Set up /usr/local/bin/do_dyndns.sh
  template:
    src: usr_local_bin_do_dyndns.sh.j2
    dest: /usr/local/bin/do_dyndns.sh
    owner: root
    group: wheel
    mode: "0755"
  register: do_dyndns_sh