Fix some ansible-lint complaints.

roles/nfs-server/tasks/main.yml

@@ -1,6 +1,7 @@
 ## Install and configure nfs-server
 ---
-- fail: msg="The machine's domain must not be empty."
+- name: check if ansible domain is nonempty
+  fail: msg="The machine's domain must not be empty."
   when: ansible_domain | length == 0
 
 - name: check if we are installing
@@ -11,7 +12,7 @@
   apt:
     name:
       - nfs-kernel-server
-    state: latest
+    state: latest # noqa package-latest # noqa package-latest
 
 - name: make sure the export paths exists
   file: path={{ export_root }}/home/ state=directory recurse=yes
@@ -33,7 +34,7 @@
   replace:
     path: /etc/hosts
     regexp: "^({{ ipaddr_lan | ipaddr('address') }}\\s.+)$"
-    replace: '\1	nfs'
+    replace: '\1 nfs'
   when: not exports.stat.exists
 
 - name: check if there is a local kadmin
@@ -55,7 +56,7 @@
       - sssd-krb5
       - sssd-ldap
       - sssd-tools     ##  sss_cache -U -G
-    state: latest
+    state: latest # noqa package-latest
   when: kadmin.stat.exists
 
 - name: provide identities from directory
@@ -80,6 +81,7 @@
   template:
     src: dhcp-send-domain.j2
     dest: /etc/dnsmasq.d/dhcp-send-domain
+    mode: 0644
   notify: "restart dnsmasq"
   when: dnsmasq.stat.exists
 
@@ -87,6 +89,6 @@
   firewalld:
     zone: internal
     service: nfs
-    permanent: yes
-    immediate: yes
+    permanent: true
+    immediate: true
     state: enabled