---
- name: refresh CAs
  command: update-ca-certificates

- name: restart rsyslog
  service: name=rsyslog state=restarted

- name: update timezone
  command: dpkg-reconfigure --frontend noninteractive tzdata

- name: apply-sysctl
  shell: "cat /etc/sysctl.conf /etc/sysctl.d/*.conf | sysctl -e -p -"

- include: ssh.yml

---
- name: refresh CAs
  command: update-ca-certificates

- name: restart rsyslog
  service: name=rsyslog state=restarted

- name: restart haproxy
  service: name=haproxy state=restarted

- name: update timezone
  command: dpkg-reconfigure --frontend noninteractive tzdata

- name: apply-sysctl
  shell: "cat /etc/sysctl.conf /etc/sysctl.d/*.conf | sysctl -e -p -"

- include: ssh.yml

Add missing haproxy restart handler
Add missing haproxy restart handler

security-patches task calls restart haproxy, so create a handler.
