---
- name: Find all files in /etc/sysctl.d
  ansible.builtin.find:
    paths: /etc/sysctl.d
    recurse: true
    file_type: any
  register: files_to_delete

- name: Remove all files from /etc/sysctl.d
  ansible.builtin.file:
    path: "{{ item.path }}"
    state: absent
  loop: "{{ files_to_delete.files }}"
  when: flush_sysctl_rules is true

- name: Disable Default sysctl.d
  ansible.builtin.file:
    path: /etc/sysctl.d/50-redhat.conf
    state: touch
    owner: root
    group: root
    mode: '0644'

- name: Disable Default sysctl.d
  ansible.builtin.file:
    path: /etc/sysctl.d/50-default.conf
    state: touch
    owner: root
    group: root
    mode: '0644'

- name: Kernel Tuning
  ansible.builtin.include_tasks: kernel_tune.yml

- name: TCP/UDP Tuning
  ansible.builtin.include_tasks: tcp_tune.yml

- name: IP Forwarding
  ansible.builtin.include_tasks: ip_forward.yml

- name: Проверить, загружен ли модуль br_netfilter
  ansible.builtin.stat:
    path: /sys/module/br_netfilter
  register: br_netfilter_status

- name: IP Bridge
  ansible.builtin.include_tasks: ip_bridge.yml
  when: br_netfilter_status.stat.exists

# Закоментировано, тк в некоторых случаях вызывает невозможность выделения памяти
# - name: Set vm.overcommit_ratio
#  ansible.posix.sysctl:
#    name: vm.overcommit_ratio
#    value: 100
#    state: present
#    sysctl_file: /etc/sysctl.d/04-ip_httpd.conf
# - name: Set vm.overcommit_memory
#  ansible.posix.sysctl:
#    name: vm.overcommit_memory
#    value: 2
#    state: present
#    sysctl_file: /etc/sysctl.d/04-ip_httpd.conf