---
- name: update timezone
  command: dpkg-reconfigure --frontend noninteractive tzdata

- name: refresh CAs
  command: update-ca-certificates

- name: reload haproxy
  service: name=haproxy state=reloaded

- name: apply-sysctl
  shell: "cat /etc/sysctl.conf /etc/sysctl.d/*.conf | sysctl -e -p -"

- name: update grub config
  command: /usr/sbin/update-grub

- include: ssh.yml

---
- name: update timezone
  command: dpkg-reconfigure --frontend noninteractive tzdata

- name: refresh CAs
  command: update-ca-certificates

- name: reload haproxy
  service: name=haproxy state=reloaded
  register: hareload
  failed_when: hareload|failed and "service not found" not in hareload.stderr

- name: apply-sysctl
  shell: "cat /etc/sysctl.conf /etc/sysctl.d/*.conf | sysctl -e -p -"

- name: update grub config
  command: /usr/sbin/update-grub

- include: ssh.yml

Handle haproxy reload when no haproxy installed
Handle haproxy reload when no haproxy installed

The handler fires for all when upgrading openssl, but not all systems
have haproxy. This used to be handled in the restart haproxy handler,
but was lost when that handler was collapsted into the reload haproxy
handler.
