ansible: move ip_local_reserved_ports to tuned profile

ansible/tasks/setup-system.yml

@@ -162,12 +162,6 @@
 
     # postgres_exporter runs on port 9187 and postgresT occasionlly chooses it as random srcport
     # adminapi for 8085
-    - name: Set net.ipv4.ip_local_reserved_ports
-      ansible.builtin.sysctl:
-        name: 'net.ipv4.ip_local_reserved_ports'
-        value: '9187,8085'
-        state: 'present'
-
 - name: Execute tasks when (debpkg_mode or nixpkg_mode)
   when:
     - (debpkg_mode or nixpkg_mode)

ansible/tasks/setup-tuned.yml

@@ -112,6 +112,19 @@
             value: 10
 
 
+        - name: tuned - Set ip_local_reserved_ports
+          become: true
+          community.general.ini_file:
+            create: true
+            group: 'root'
+            mode: '0644'
+            no_extra_spaces: true
+            option: 'net.ipv4.ip_local_reserved_ports'
+            path: '/etc/tuned/profiles/postgresql/tuned.conf'
+            section: 'sysctl'
+            state: 'present'
+            value: '3000,3001,8085,9122,9187,9999'
+
         - name: tuned - Set tcp_keepalive_time
           become: true
           community.general.ini_file: