style: make ansible-lint happier

roles/nginx/tasks/main.yml

@@ -1,21 +1,22 @@
 ---
 
-- name: install nginx package
-  package:
+- name: Install nginx package
+  ansible.builtin.package:
     name: nginx-full
     state: present
 
-- name: create dhparam
-  shell: /usr/bin/openssl dhparam -out /etc/nginx/dhparam.pem 2048
-  args:
+- name: Create dhparam
+  ansible.builtin.command:
+    cmd: /usr/bin/openssl dhparam -out /etc/nginx/dhparam.pem 2048
     creates: /etc/nginx/dhparam.pem
 
-- name: put configuration files
-  template:
+- name: Put configuration files
+  ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
+    mode: 0644
   notify:
-    - restart nginx
+    - Restart nginx
   loop:
     - {src: nginx.conf.j2, dest: /etc/nginx/nginx.conf}
     - {src: nginx.ssl.conf.j2, dest: /etc/nginx/nginx.ssl.conf}
@@ -23,20 +24,21 @@
     - {src: proxy_params.j2, dest: /etc/nginx/proxy_params}
     - {src: default.j2, dest: /etc/nginx/sites-available/default}
 
-- name: create base dir
-  file:
+- name: Create base dir
+  ansible.builtin.file:
     path: /srv/http
     owner: root
     group: www-data
     mode: 'u+rwx,g+rs,o-rwx'
     state: directory
 
-- name: create letsencrypt dir
-  file:
+- name: Create letsencrypt dir
+  ansible.builtin.file:
     path: /srv/http/common/letsencrypt
     owner: root
     group: www-data
     mode: 'u+rwx,g+rs,o-rwx'
     state: directory
 
-- include_tasks: vhosts.yml
+- name: Include vhosts
+  ansible.builtin.include_tasks: vhosts.yml

roles/nginx/tasks/vhosts.yml

@@ -1,20 +1,21 @@
 ---
 
-- name: symlink vhosts
-  file:
+- name: Symlink vhosts
+  ansible.builtin.file:
     src: "/etc/nginx/sites-available/{{ item }}.conf"
     dest: "/etc/nginx/sites-enabled/{{ item }}.conf"
     force: true
     follow: false
     state: link
   notify:
-    - restart nginx
+    - Restart nginx
   loop: "{{ web_hostname }}"
 
-- name: install vhosts
-  template:
+- name: Install vhosts
+  ansible.builtin.template:
     src: "vhosts/{{ item }}.conf.j2"
     dest: "/etc/nginx/sites-available/{{ item }}.conf"
+    mode: 0644
   notify:
-    - restart nginx
+    - Restart nginx
   loop: "{{ web_hostname }}"