- hosts: router
  name: Sync mailu
  ignore_unreachable: false
  vars:
      app_path: "<MAIL_SERVER>25,143,465,993,995,587>192.168.77.106>dsadsad dsad dasdas-ddasd>TCP><WEB_SERVER>443,80>192.168.77.106>>TCP>"
      NEW_IP: "192.168.77.238"
  tasks:
    - name: Get ruleset
      command: nvram get vts_rulelist
      when: inventory_hostname in groups['router']
      register: ruleset
    - name: Print the gateway for each host when defined
      ansible.builtin.debug:
        msg: "var is {{ ruleset.stdout }}"
    - set_fact:
        app_path: "{{ ruleset.stdout | regex_replace('(\\<MAIL_SERVER\\>[0-9,]{1,}\\>)([0-9.]{1,})(\\>[0-9a-zA-Z\\s-]{0,}\\>TCP\\>)', '\\1{{ NEW_IP }}\\3') | regex_replace('(\\<WEB_SERVER\\>[0-9,]{1,}\\>)([0-9.]{1,})(\\>[0-9a-zA-Z\\s-]{0,}\\>TCP\\>)', '\\1{{ NEW_IP }}\\3') }}"
      vars:
        NEW_IP: ",world"
    - name: Print the gateway for each host when defined
      ansible.builtin.debug:
        msg: "var is {{ app_path }}"