---
- name: Ensure compliance integration is enabled
  hosts: all
  become: true

  tasks:
    - name: Set integrations.compliance to true if currently false
      ansible.builtin.replace:
        path: /etc/patchmon/config.yml
        regexp: '(^integrations:\n(?:[ \t]+.*\n)*?[ \t]+compliance:\s*)false'
        replace: '\1true'
        backup: true
      notify: Restart patchmon

  handlers:
    - name: Restart patchmon
      ansible.builtin.service:
        name: patchmon
        state: restarted