---
# validate config first
- name: restart shorewall
  shell: shorewall check
  notify: restart shorewall after check

- name: restart shorewall after check
  service:
    name: shorewall
    state: restarted