- hosts: debmirror
  remote_user: root
  roles:
    - role: sane_debian_system
    - role: comfortable-debian-system
    - role: unix_users
    - role: apache_server
      tags: [apache]
    - role: self-updating-system
    - role: debian-mirror
      tags: [mirror]
    - role: smarthost-client
  vars:
    sane_debian_system_version: 0
    unix_users_version: 0

    hostname: debmirror
    debian_codename: buster
    debian_mirror: deb.debian.org

    unix_users:
      - username: liw
        comment: Lars Wirzenius
        sudo: yes
      - username: debmirror
        comment: Debian Mirror

    static_sites:

      - domain: debmirror
        owner: debmirror
        ownermail: liw@liw.fi
        letsencrypt: no

    mailname: debmirror.liw.fi
    timezone: Europe/Helsinki

    relayhost: pieni.net:587
    smarthost: pieni.net
    smarthost_user: pienirelay
    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"