- hosts: solace
  remote_user: root
  become: no
  roles:
    - role: sane_debian_system
    - role: sshd
    - role: ssd
    - role: comfortable-debian-system
    - role: version-controller
    - role: vmhost
    - role: mail-client
    - role: unix_users
    - role: rust-rustup
    - role: liw
    - role: self-updating-system

  tasks:
    # Remove ping to force it be reinstalled so that the right
    # capabilities are set.
    - apt:
        name: iputils-ping
        state: absent

    - name: install command line utilities
      apt:
        name:
        - build-essential
        - firmware-misc-nonfree
        - firmware-realtek
        - iputils-ping
        - locales-all
        - memtest86+
        - python3
        - rsync
        - time
        - vim
        - wireless-regdb

    - name: "configure GRUB to wait a little before booting"
      lineinfile:
        path: /etc/default/grub
        regexp: GRUB_TIMEOUT
        line: "GRUB_TIMEOUT=5"

    - name: "update grub"
      shell: |
        update-grub

  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bookworm
    sane_debian_system_timezone: Europe/Helsinki
    sane_debian_system_sources_lists:
      - repo: |
          deb http://deb.debian.org/debian bookworm contrib non-free non-free-firmware

      - repo: |
          deb http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware

      - repo: deb http://apt.liw.fi/debian unstable main
        signing_key: "{{ apt_liw_fi_signing_key }}"

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius
        groups:
          - libvirt

    mailname: "{{ sane_debian_system_hostname }}.liw.fi"

    relayhost: pieni.net:587
    smarthost: pieni.net
    smarthost_user: pienirelay
    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"

    rustup_cargo_install: |
      starship \
      bottom

    sshd_version: 1