- name: restart pf
  when: is_pf_running.rc == 0
  service:
    name: pf
    state: reloaded