railiance-infra/ansible/roles/goss/handlers/main.yml

---
- name: Reload systemd daemon
  ansible.builtin.systemd:
    daemon_reload: true
Close RAIL-HO-WP-0009 declared-state gaps; leave live 6443 prune gated Make the k3s API tunnel-only (ADR-005), stop declaring Flannel VXLAN open to Anywhere, tag the base role so firewall can be scoped, and schedule the Goss declared-vs-live check. CoulombCore sets ufw_manage false so a converge cannot enable UFW there. T02 still needs operator approval for make converge-firewall HOST=Railiance01. 2026-08-15 15:41:59 +02:00			`---`
			`- name: Reload systemd daemon`
			`ansible.builtin.systemd:`
			`daemon_reload: true`