noticket Changes from redeploy to new server

ansible/roles/http/tasks/http.yml

@@ -28,15 +28,6 @@
     recurse: true
   tags: http
 
-- name: touch nginx logs, enable jail
-  become: true
-  file:
-    path: "/var/log/nginx/error.log"
-    state: file
-    mode: 0644
-  notify: restart_fail2ban
-  tags: http, security
-
 - name: template nginx http sites-available
   become: true
   template:

ansible/roles/http/tasks/main.yml

@@ -1,5 +1,6 @@
 ---
 - import_tasks: deps.yml
+- import_tasks: security.yml
 - import_tasks: modsec.yml
 - import_tasks: http.yml
 - import_tasks: https.yml

ansible/roles/http/tasks/security.yml

@@ -0,0 +1,12 @@
+---
+- name: touch nginx logs, enable jail
+  become: true
+  file:
+    path: "/var/log/nginx/{{ item }}.log"
+    state: touch
+    mode: 0644
+  loop:
+    - access
+    - error
+  notify: restart_fail2ban
+  tags: http, security