---
- name: "Copy NWaf type enforcement file"
  copy:
    src: "nginx_nwaf_se_allow.te"
    dest: "/tmp/nginx_nwaf_se_allow.te"

- name: "Compile NWaf module file"
  command: checkmodule -M -m -o /tmp/nginx_nwaf_se_allow.mod /tmp/nginx_nwaf_se_allow.te

- name: "Build NWaf policy package"
  command: semodule_package -o /tmp/nginx_nwaf_se_allow.pp -m /tmp/nginx_nwaf_se_allow.mod

- name: "Load NWaf policy package"
  command: semodule -i /tmp/nginx_nwaf_se_allow.pp

- name: "Remove temporary files"
  file:
    path: /tmp/nginx_nwaf_se_allow.*
    state: absent