---
# If the system is updated before any iptables modules are loaded
#  the system can't find the modules and iptables rules can't be
#  loaded first time. (A repeat ansible run seems to fix it, though).
# Let's avoid a first-time failure by doing the upgrade after the
#  iptables rules have been updated.
# Consistent with: https://serverfault.com/questions/593263/iptables-nat-does-not-exist
- name: Update existing packages
  apt:
    upgrade: safe
- name: install php5-fpm
  apt: pkg=php5-fpm state=installed update_cache=true
    

---
# If the system is updated before any iptables modules are loaded
#  the system can't find the modules and iptables rules can't be
#  loaded first time. (A repeat ansible run seems to fix it, though).
# Let's avoid a first-time failure by doing the upgrade after the
#  iptables rules have been updated.
# Consistent with: https://serverfault.com/questions/593263/iptables-nat-does-not-exist
- name: Update existing packages
  apt:
    upgrade: safe
- name: install php5-fpm
  apt: pkg=php5-fpm state=installed update_cache=true
- name: allow www-data to pumount
  blockinfile:
    dest: /etc/sudoers
    block: |
      www-data ALL=(ALL) ALL
      www-data ALL=(ALL) NOPASSWD: /usr/bin/pumount

Add www-data to sudoers to allow unmount
Add www-data to sudoers to allow unmount
