- hosts: v-i-dev
  remote_user: debian
  become: yes
  roles:
    - role: sane_debian_system
      tags: [sane]
    - role: sshd
      tags: [sshd]
    - role: comfortable-debian-system
      tags: [comfy]
    - role: unix_users
      tags: [users]
    - role: version-controller
      tags: [vcs]
    - role: liw
      tags: [liw]
  tasks:
    - apt:
        name: ca-certificates-java
        default_release: bookworm-backports
    - apt:
        name:
          - ansible
          - build-essential
          - cryptsetup
          - dosfstools
          - expect
          - graphviz
          - kpartx
          - librsvg2-bin
          - lvm2
          - moreutils
          - ovmf
          - pandoc
          - parted
          - plantuml
          - python3
          - python3
          - python3-requests
          - python3-yaml
          - qemu-system-x86
          - qemu-utils
          - subplot
          - vmdb2
          - zerofree
  vars:
    ansible_python_interpreter: python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bookworm

    timezone: Europe/Helsinki

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius
        sudo: yes

    sane_debian_system_sources_lists:
      - repo: deb http://apt.liw.fi/debian unstable main
        signing_key: "{{ apt_liw_fi_signing_key }}"
      - repo: |
          deb http://deb.debian.org/debian bookworm-backports main contrib non-free

    sshd_version: 1
    sshd_allow_authorized_keys: yes