- hosts: web
  remote_user: ansible
  become: yes
  roles:
    - sane_debian_system
    - unix_users
    - apache_server
  vars:
    hostname: web
    debian_codename: stretch
    debian_mirror: deb.debian.org
    debian_mirror_src: deb.debian.org
    codeliwfidistro: stretch
    static_sites:
      - domain: web
        owner: liw
        ownermail: liw@liw.fi
    worker_manager_ssh_pub: "{{ lookup('pipe', 'pass show ick2/wm_ssh_key_pub') }}"
    unix_users:
      - username: liw
        comment: Lars Wirzenius
        authorized_keys: |
          {{ liw_ssh_pub }}
          {{ worker_manager_ssh_pub }}