---
- name: apt update
  ansible.builtin.apt:
    update_cache: true

- name: reload sshd
  ansible.builtin.systemd:
    name: sshd
    state: reloaded

- name: restart fail2ban
  ansible.builtin.systemd:
    name: fail2ban
    state: restarted

- name: restart pve-firewall
  ansible.builtin.command:
    cmd: pve-firewall restart
  changed_when: true