- hosts: exolobe2
  remote_user: ansible
  become: yes
  roles:
    - sane_debian_system
    - sshd
    - ssd
    - comfortable-debian-system
    - unix_users
    - self-updating-system
    - emacs
    - vmhost
    - storage_system
    - mail-client
  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: exolobe2
    sane_debian_system_codename: bullseye
    sane_debian_system_sources_lists:
      - repo: |
          deb http://security.debian.org/debian-security bullseye-security main contrib non-free

      - repo: |
          deb http://deb.debian.org/debian bullseye contrib non-free

      - repo: deb http://apt.liw.fi/debian unstable main
        signing_key: "{{ apt_liw_fi_signing_key }}"

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius
        sudo: yes
        authorized_keys: |
          {{ liw_personal_ssh_pub }}
      - username: root
        authorized_keys: |
          {{ liw_personal_ssh_pub }}
      - username: ansible
        sudo: yes
        authorized_keys: |
          {{ liw_personal_ssh_pub }}

    mailname: "{{ sane_debian_system_hostname }}.liw.fi"
    relayhost: pieni.net:587
    smarthost: pieni.net
    smarthost_user: pienirelay
    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"

    sshd_version: 1