- hosts: wumpus.liw.fi
  remote_user: root
  become: yes
  roles:
    - role: sane_debian_system
    - role: sshd
    - role: comfortable-debian-system
    - role: unix_users
    - role: apache_server
    - role: rust-rustup
    - role: liw
  tasks:
    - name: "install important additional packages"
      apt:
        name:
          - moreutils
          - nmap
          - ripgrep

  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bookworm
    sane_debian_system_timezone: Europe/Helsinki
    sane_debian_system_sources_lists:
      - repo: |
          deb http://security.debian.org/debian-security bookworm-security main contrib non-free

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius

    sshd_version: 1

    rustup_cargo_install: |
      starship

    letsencrypt: yes
    letsencrypt_email: liw@liw.fi
    letsencrypt_main_domain: wumpus.liw.fi
    certbot_debian_release: bookworm

    static_sites:

      - domain: wumpus.liw.fi
        owner: liw
        ownermail: liw@liw.fi
        letsencrypt: yes
        letsencrypt_cert: cert01