fix(roles/mailx,policycoreutils,yum_utils): fix grammar, sort params, rewrite READMEs

Fix grammar in task names (mailx: "make" -> "makes",
policycoreutils: "are" -> "is"). Sort template module parameters
alphabetically in mailx. Rewrite all three READMEs from table
format to structured bullet format with skip variables section.

Author: markuslf

CHANGELOG.md

@@ -15,6 +15,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * Update pre-commit hooks to latest versions
 * Unify CONTRIBUTING and convert from reStructuredText to Markdown
 
+### Fixed
+
+* **role:apache_httpd**: Fix `apache_httpd__mod_security_coreruleset_version` default value in README (4.4.0 -> 4.24.1), fix prefork variable names in README (`spare_threads` -> `spare_servers`), fix various typos ("best practise", "Tipp")
+* **role:mailx**: Fix grammar in task name ("make" -> "makes"), sort template module parameters alphabetically
+* **role:policycoreutils**: Fix grammar in task name ("are" -> "is")
+
 ### Breaking Changes
 
 * **role:nfs_server**: Rework `nfs_server__exports` from a list of strings to a list of dictionaries with new `path`, `clients`, `owner`, `group`, and `mode` subkeys
@@ -23,6 +29,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
+* Add `playbooks/README.md` documenting all playbooks with their roles in execution order and available skip variables
+* **role:apache_httpd**: Add platform-specific behavior section, wsgi example, and document localhost endpoints in README
+* **role:apache_httpd**: Add skip variables section to README linking to relevant playbooks
+* **role:mailx**: Add skip variables section to README linking to relevant playbooks
+* **role:policycoreutils**: Add skip variables section to README linking to relevant playbooks
+* **role:yum_utils**: Add skip variables section to README linking to relevant playbooks
 * **plugin:bitwarden_item**: Add file-based item cache to reduce `bw serve` API calls, preventing crashes under load. Cache is stored in `$XDG_RUNTIME_DIR` (RAM-backed tmpfs) with `/tmp` fallback. After create/edit operations, the cache is updated inline to avoid expensive full re-syncs, with a 1-second sleep as rate limit to prevent Bitwarden API errors. Convert `is_unlocked` to a property to fix it never being called.
 * **role:freeipa_server**: Add `--diff` support for all FreeIPA modules and add `freeipa_server:configure` tag
 * **role:mariadb_server**: Add `mariadb_server__cnf_wsrep_log_conflicts` and `mariadb_server__cnf_wsrep_retry_autocommit` variables

roles/mailx/README.md

@@ -1,13 +1,25 @@
 # Ansible Role linuxfabrik.lfops.mailx
 
-This role installs [mailx](http://heirloom.sourceforge.net/mailx.html) and deploys a bash wrapper script that make sending mail easier to `/root/send-mail`.
+This role installs [mailx](http://heirloom.sourceforge.net/mailx.html) and deploys a bash wrapper script that makes sending mail easier to `/root/send-mail`.
 
 
 ## Tags
 
-| Tag     | What it does                              | Reload / Restart |
-| ---     | ------------                              | ---------------- |
-| `mailx` | Installs mailx and deploys wrapper script | - |
+`mailx`
+
+* Installs the mailx package.
+* Deploys a bash wrapper script to `/root/send-mail`.
+* Triggers: none.
+
+
+## Skip Variables
+
+This role is used in several playbooks that provide skip variables to disable specific dependencies. See the playbooks documentation for details:
+
+* [mailto_root.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#mailto_rootyml)
+* [postfix.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#postfixyml)
+* [setup_basic.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_basicyml)
+* [system_update.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#system_updateyml)
 
 
 ## License

roles/mailx/tasks/main.yml

@@ -10,13 +10,13 @@
       name: '{{ mailx__package }}'
       state: 'present'
 
-  - name: 'Deploy bash wrapper script that make sending mail easier to /root/send-mail'
+  - name: 'Deploy bash wrapper script that makes sending mail easier to /root/send-mail'
     ansible.builtin.template:
       backup: true
-      src: 'root/send-mail.j2'
       dest: '/root/send-mail'
-      owner: 'root'
       mode: 0o755
+      owner: 'root'
+      src: 'root/send-mail.j2'
 
   tags:
     - 'mailx'

roles/policycoreutils/README.md

@@ -5,9 +5,34 @@ This role installs the SELinux policy core python utilities.
 
 ## Tags
 
-| Tag               | What it does                                  | Reload / Restart |
-| ---               | ------------                                  | ---------------- |
-| `policycoreutils` | Installs SELinux policy core python utilities | - |
+`policycoreutils`
+
+* Installs the `policycoreutils-python-utils` package.
+* Triggers: none.
+
+
+## Skip Variables
+
+This role is used in several playbooks that provide skip variables to disable specific dependencies. See the playbooks documentation for details:
+
+* [apache_httpd.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#apache_httpdyml)
+* [apache_tomcat.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#apache_tomcatyml)
+* [clamav.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#clamavyml)
+* [fail2ban.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#fail2banyml)
+* [mariadb_server.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#mariadb_serveryml)
+* [openvpn_server.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#openvpn_serveryml)
+* [selinux.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#selinexyml)
+* [setup_basic.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_basicyml)
+* [setup_grav.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_gravyml)
+* [setup_graylog_datanode.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_graylog_datanodeyml)
+* [setup_graylog_server.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_graylog_serveryml)
+* [setup_icinga2_master.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_icinga2_masteryml)
+* [setup_keycloak.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_keycloakyml)
+* [setup_librenms.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_librenmsyml)
+* [setup_mastodon.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_mastodonyml)
+* [setup_moodle.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_moodleyml)
+* [setup_nextcloud.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_nextcloudyml)
+* [setup_wordpress.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_wordpressyml)
 
 
 ## License

roles/policycoreutils/tasks/main.yml

@@ -5,7 +5,7 @@
       name: 'shared'
       tasks_from: 'platform-variables.yml'
 
-  - name: 'Make sure SELinux {{ policycoreutils__package }} are installed'
+  - name: 'Make sure SELinux {{ policycoreutils__package }} is installed'
     ansible.builtin.package:
       name: '{{ policycoreutils__package }}'
       state: 'present'

roles/yum_utils/README.md

@@ -1,13 +1,30 @@
 # Ansible Role linuxfabrik.lfops.yum_utils
 
-This role simply installs `yum-utils` package.
+This role installs the `yum-utils` or `dnf-utils` package.
 
 
 ## Tags
 
-| Tag         | What it does                            | Reload / Restart |
-| ---         | ------------                            | ---------------- |
-| `yum_utils` | Installs yum-utils or dnf-utils package | - |
+`yum_utils`
+
+* Installs the `yum-utils` or `dnf-utils` package.
+* Triggers: none.
+
+
+## Skip Variables
+
+This role is used in several playbooks that provide skip variables to disable specific dependencies. See the playbooks documentation for details:
+
+* [icingaweb2.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#icingaweb2yml)
+* [mirror.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#mirroryml)
+* [php.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#phpyml)
+* [setup_basic.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_basicyml)
+* [setup_grav.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_gravyml)
+* [setup_icinga2_master.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_icinga2_masteryml)
+* [setup_librenms.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_librenmsyml)
+* [setup_nextcloud.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_nextcloudyml)
+* [setup_wordpress.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#setup_wordpressyml)
+* [system_update.yml](https://github.com/Linuxfabrik/lfops/blob/main/playbooks/README.md#system_updateyml)
 
 
 ## License