X-Git-Url: https://git.ralfj.de/ansible.git/blobdiff_plain/9de7307d6f88f94b16a40cb892f1304c53f712d9..f95ae12f32d451750876153716f75f553c86d603:/roles/apache/tasks/main.yml

diff --git a/roles/apache/tasks/main.yml b/roles/apache/tasks/main.yml
index 8e262da..6878845 100644
--- a/roles/apache/tasks/main.yml
+++ b/roles/apache/tasks/main.yml
@@ -35,6 +35,7 @@
   - php5.conf
   - security.conf
   - defaults.conf
+  - caching.conf
   notify: apache
 - name: enable config files
   command: a2enconf {{ item }}
@@ -44,6 +45,7 @@
   - ssl
   - security
   - defaults
+  - caching
   notify: apache
 - name: disable config files
   command: a2disconf {{ item }}
@@ -68,9 +70,13 @@
       [Unit]
       After=network-online.target
       Wants=network-online.target
-- name: sysconfig to disable DAD
+      [Service]
+      Restart=on-failure
+- name: cleanup old sysconfig
+  file: path=/etc/sysctl.d/50-no-dad.conf state=absent
+- name: sysconfig to fix IPv6 listening
   copy:
-    dest: /etc/sysctl.d/50-no-dad.conf
+    dest: /etc/sysctl.d/50-ipv6-listen.conf
     content: |
-      # Disable DAD so network-online.target works for IPv6
-      net.ipv6.conf.all.accept_dad=0
+      # Allow binding to IPv6 address before we got that address
+      net.ipv6.ip_nonlocal_bind=1