- hosts: x220
  remote_user: root
  roles:
    - role: sane_debian_system
    - role: sshd
    - role: ssd
    - role: unix_users
    - role: thinkpad
    - role: puomi

  tasks:
    - lineinfile:
        path: /etc/systemd/logind.conf
        regexp: HandleLidSwitch=
        line: HandleLidSwitch=ignore
    - lineinfile:
        path: /etc/systemd/logind.conf
        regexp: HandleLidSwitchExternalPower=
        line: HandleLidSwitchExternalPower=ignore
    - systemd:
        name: systemd-logind
        state: restarted
  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bullseye
    sane_debian_system_timezone: Europe/Helsinki

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius

    sshd_version: 1
    sshd_host_key: "{{ lookup('pipe', 'sshca host private-key x220') }}"
    sshd_host_cert: "{{ lookup('pipe', 'sshca host certify liw.fi/ca/host/v4 x220') }}"
    sshd_user_ca_pub: "{{ lookup('pipe', 'sshca ca public-key liw.fi/ca/user/v3') }}"

    puomi_lan_ip: 10.3.3.1
    puomi_dhcp_start: 10.3.3.10
    puomi_dhcp_end: 10.3.3.250
    puomi_dhcp_netmask: 255.255.255.0
    puomi_dhcp_lease: 1h
    puomi_essid: Valkama3
    puomi_wifi_country_code: FI
    puomi_wifi_passphrase: Oomam2ah