- hosts: openpgp-card-dev
  remote_user: debian
  become: yes
  roles:
    - role: sane_debian_system
      tags: [sane]
    - role: sshd
      tags: [sshd]
    - role: version-controller
      tags: [vcs]
    - role: unix_users
      tags: [users]
    - role: rust-rustup
      tags: [rustup]
    - role: liw
      tags: [liw]

  tasks:
    - apt:
        name:
          - build-essential
          - debhelper
          - dh-cargo
          - docker.io
          - libclang-dev
          - libpcsclite-dev
          - lintian
          - moreutils
          - nettle-dev
          - pkg-config
          - subplot
    - user:
        name: liw
        groups:
          - docker
  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bullseye
    sane_debian_system_timezone: Europe/Helsinki

    sane_debian_system_sources_lists:
      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
        signing_key: "{{ ci_prod_signing_key }}"

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius

    sshd_version: 1
    sshd_allow_authorized_keys: yes