use become

handlers/main.yml

@@ -1,5 +1,5 @@
 ---
-- name: Restart postfix
+- name: Restart service
   service:
     name: postfix
     state: restarted

tasks/config.yml

@@ -1,57 +1,60 @@
 ---
-- name: Configure postfix
+- name: Setup postfix
-  template:
+  block:
-    src: etc/postfix/main.cf.j2
+  - name: Configure postfix
-    dest: /etc/postfix/main.cf
+    template:
-    owner: root
+      src: etc/postfix/main.cf.j2
-    group: root
+      dest: /etc/postfix/main.cf
-    mode: 0644
+      owner: root
-  notify: postfix_restart
+      group: root
+      mode: 0644
+    notify: postfix_restart
 
-- name: Create sasl
+  - name: Create sasl
-  template:
+    template:
-    src: etc/postfix/sasl_passwd.j2
+      src: etc/postfix/sasl_passwd.j2
-    dest: /etc/postfix/sasl_passwd
+      dest: /etc/postfix/sasl_passwd
-    owner: root
+      owner: root
-    group: root
+      group: root
-    mode: 0600
+      mode: 0600
-  register: sasl_result
+    register: sasl_result
 
-- name: Ensure sasl_passwd.db exist
+  - name: Ensure sasl_passwd.db exist
-  stat:
+    stat:
-    path: /etc/postfix/sasl_passwd.db
+      path: /etc/postfix/sasl_passwd.db
-  register: sasldb
+    register: sasldb
 
-- name: Create sasl_passwd.db
+  - name: Create sasl_passwd.db
-  command: /usr/sbin/postmap hash:/etc/postfix/sasl_passwd
+    command: /usr/sbin/postmap hash:/etc/postfix/sasl_passwd
-  when: not sasldb.stat.exists or sasl_result.changed
+    when: not sasldb.stat.exists or sasl_result.changed
-  register: sasldb_update
+    register: sasldb_update
-  notify: postfix_restart
+    notify: postfix_restart
 
-- name: Set permissions for sasl_passwd.db
+  - name: Set permissions for sasl_passwd.db
-  file:
+    file:
-    path: /etc/postfix/sasl_passwd.db
+      path: /etc/postfix/sasl_passwd.db
-    owner: root
+      owner: root
-    group: root
+      group: root
-    mode: 0600
+      mode: 0600
-  notify: postfix_restart
+    notify: postfix_restart
 
-- name: Override outgoing header
+  - name: Override outgoing header
-  template:
+    template:
-    src: etc/postfix/sender_canonical.j2
+      src: etc/postfix/sender_canonical.j2
-    dest: /etc/postfix/sender_canonical
+      dest: /etc/postfix/sender_canonical
-    owner: root
+      owner: root
-    group: root
+      group: root
-    mode: 0600
+      mode: 0600
-  register: sender_result
+    register: sender_result
 
-- name: Ensure sender_canonical.db exist
+  - name: Ensure sender_canonical.db exist
-  stat:
+    stat:
-    path: /etc/postfix/sender_canonical.db
+      path: /etc/postfix/sender_canonical.db
-  register: senderdb
+    register: senderdb
 
-- name: Hash sender_canoncial
+  - name: Hash sender_canoncial
-  command: "/usr/sbin/postmap hash:/etc/postfix/sender_canonical"
+    command: "/usr/sbin/postmap hash:/etc/postfix/sender_canonical"
-  when: not senderdb.stat.exists or sender_result.changed
+    when: not senderdb.stat.exists or sender_result.changed
-  register: senderdb_update
+    register: senderdb_update
-  notify: postfix_restart
+    notify: postfix_restart
+  become: True

tasks/install.yml

@@ -1,9 +1,12 @@
 ---
 - name: Install postfix mta
-  package:
+  block:
-    name: '{{ item }}'
+  - name: Install required packages
-    state: latest
+    package:
-  with_items:
+      name: '{{ item }}'
-    - postfix
+      state: latest
-    - cyrus-sasl-plain
+    with_items:
-    - mailx
+      - postfix
+      - cyrus-sasl-plain
+      - mailx
+  become: True