---
- name: Configure sysctl parameters
  become: true
  ansible.posix.sysctl:
    name: "{{ item.key }}"
    value: "{{ item.value }}"
    state: present
    reload: true
  loop: "{{ sysctl_tuning | dict2items }}"
  tags: optimization

- name: Configure file handle limits
  become: true
  ansible.builtin.lineinfile:
    path: /etc/security/limits.conf
    regexp: "^{{ item.user | regex_escape }}.*{{ item.type }}"
    line: "{{ item.user }} - nofile {{ item.limit }}"
    create: true
    mode: "0644"
  loop:
    - { user: "root", type: "soft", limit: "65536" }
    - { user: "root", type: "hard", limit: "65536" }
    - { user: "*", type: "soft", limit: "65536" }
    - { user: "*", type: "hard", limit: "65536" }
  tags: limits