use handlers for nginx

roles/services/handlers/main.yml

 ---
 
+- name: check nginx config
+  command:
+    cmd: nginx -t
+
 - name: restart nginx
   systemd:
     state: restarted

roles/services/tasks/nginx.yml

@@ -16,13 +16,17 @@
     creates: /etc/nginx/dhparam.pem
 
 - name: copy snippets
-  notify: restart nginx
+  notify:
+    - restart nginx
+    - check nginx config
   copy:
     src: nginx/snippets
     dest: /etc/nginx/
 
 - name: copy available sites
-  notify: restart nginx
+  notify:
+    - restart nginx
+    - check nginx config
   copy:
     src: "{{ item }}"
     dest: /etc/nginx/sites-available/
@@ -32,31 +36,22 @@
 - name: enable sites
   block:
     - name: remove all enabled sites
+      changed_when: false
       file:
         state: absent
         path: "/etc/nginx/sites-enabled/"
     - name: create enabled-sites directory
-      notify: restart nginx
+      notify:
+        - restart nginx
+        - check nginx config
       file:
         state: directory
         path: "/etc/nginx/sites-enabled"
     - name: enable selected sites
+      changed_when: false
       notify: restart nginx
       file:
         state: link
         src: "../sites-available/{{ item | basename }}"
         dest: "/etc/nginx/sites-enabled/{{ item | basename }}"
       with_fileglob: 'nginx/sites/*'
-
-
-- name: check nginx config
-  command:
-    cmd: nginx -t
-
-- name: restart nginx
-  systemd:
-    enabled: true
-    state: restarted
-    name: "{{ item }}"
-  with_items:
-      - nginx

services.yml

@@ -2,6 +2,7 @@
   become: true
   roles:
     - ffhl_access
-    - services
+    - role: services
+      tags: [services]
     - role: dns_auth
-      tags: [nameserver, nsauth]
+      tags: [dns_auth, nameserver, nsauth]