---
- name: Refresh setup facts
  setup:

- name: Report selinux status
  debug:
    var: ansible_selinux.status

- name: Set disabled
  set_fact:
    disabled: "{{ ansible_selinux.status | lower == 'disabled' | bool }}"

- name: Permanently disable SELINUX
  selinux: state=disabled
  when: not disabled

- name: Restart node
  debug:
    msg: 'SELinux MUST be disabled, selinux has been updated, restarting node now...'
  when: not disabled

- name: Restarting node now
  ignore_errors: yes
  become: yes
  shell: 'reboot now'
  when: not disabled
  async: 0
  poll: 0

- name: Waiting for server to complete restarting
  become: no
  local_action: wait_for host='{{ ansible_host }}' state=started delay=60 timeout='{{ server_restart_timeout | d(720) }}'
  when: not disabled

- name: Server usually needs a little more time ...
  become: no
  local_action: wait_for host='{{ ansible_host }}' state=started delay=60
  when: not disabled