ansible-roles/nginx/tasks/server_status_read.yml

---

- name: "server status dirname exists '{{ nginx_serverstatus_suffix_file | dirname }}'"
  ansible.builtin.file:
    dest: "{{ nginx_serverstatus_suffix_file | dirname }}"
    mode: "0700"
    owner: root
    group: root
    state: directory

- name: set nginx serverstatus suffix if provided
  ansible.builtin.copy:
    dest: "{{ nginx_serverstatus_suffix_file }}"
    # The last character "\u000A" is a line feed (LF), it's better to keep it
    content: "{{ nginx_serverstatus_suffix }}\u000A"
    force: yes
  when: nginx_serverstatus_suffix | length > 0

- name: generate random string for server-status suffix
  ansible.builtin.shell:
    cmd: "apg -a 1 -M N -n 1 > {{ nginx_serverstatus_suffix_file }}"
  args:
    creates: "{{ nginx_serverstatus_suffix_file }}"

- name: read nginx server status suffix
  ansible.builtin.command:
    cmd: "tail -n 1 {{ nginx_serverstatus_suffix_file }}"
  changed_when: False
  check_mode: no
  register: new_nginx_serverstatus_suffix

- name: overwrite nginx_serverstatus_suffix
  ansible.builtin.set_fact:
    nginx_serverstatus_suffix: "{{ new_nginx_serverstatus_suffix.stdout }}"

- ansible.builtin.debug:
    var: nginx_serverstatus_suffix
    verbosity: 1