use explicit service command as $PATH is not available to cron scripts
move ansible metadir creation to common system role, introduce ansible
group
improve varnish VCL configuration