---
- name: Install required packages
  ansible.builtin.dnf:
    name:
      - httpd
      - firewalld
      - php
    state: present

- name: Enable and start httpd
  ansible.builtin.service:
    name: httpd
    state: started
    enabled: true

- name: Enable and start firewalld
  ansible.builtin.service:
    name: firewalld
    state: started
    enabled: true

- name: Allow HTTP traffic through firewalld (persistent and immediate)
  ansible.posix.firewalld:
    service: http
    state: enabled
    permanent: true
    immediate: true

- name: Fix SELinux context on webroot
  ansible.builtin.command: restorecon -Rv {{ phpinfo_webroot }}
  changed_when: false

- name: Deploy PHP info page
  ansible.builtin.template:
    src: index.php.j2
    dest: "{{ phpinfo_webroot }}/{{ phpinfo_file }}"
    owner: root
    group: root
    mode: '0644'
  notify: Restart httpd