- hosts: x220
  remote_user: root
  roles:
    - role: sane_debian_system
    - role: ssd
    - role: comfortable-debian-system
    - role: chaoskey-host
    - role: intel-wifi
    - role: version-controller
    - role: emacs
    - role: gnupg-workstation
    - role: gnome-system
    - role: ansible
    - role: unix_users
    - role: thinkpad
  tasks:
    - apt:
        name:
          - ssh
          - build-essential
          - hugo

    - name: install command line utilities
      apt:
        name:
        - locales-all
        - psmisc
        - mosh
        - rsync
        - vim
        - screen
        - tmux
        - strace
        - gddrescue
        - pv
        - moreutils
        - bind9-host
        - dnsutils
        - lshw
        - curl
    #    - extrautils
    #    - liw-automation
    #    - copyright-statement-lint
        - bc
        - yaml-mode
        - ikiwiki
        - taskwarrior
        - zip
    #    - cachedir
        - debmirror
        - git-annex
        - iftop
        - info
    #    - jt
        - kpartx
        - lftp
        - mediainfo
        - mmv
        - mtr
        - num-utils
        - parted-doc
        - trickle
        - units
        - w3m
        - youtube-dl
        - signing-party
        - sshfs
        - dict
        - dictd
        - dict-foldoc
        - dict-gcide
        - dict-jargon
        - dict-vera
        - dict-wn
        - gnuplot
        - acpi
        - nmap
        - nethogs
        - time
        - restic
        - apt-file
        - whois
        - oathtool
        - htop
        - smartmontools
        - bonnie++
        - mdadm
        - hddtemp
        - parted
        - lvm2
        - cryptsetup

    - name: configure dict
      copy:
        content: |
          server localhost
        dest: /etc/dictd/dict.conf

    - lineinfile:
        path: /etc/xdg/autostart/gnome-keyring-ssh.desktop
        line: Hidden=true

    - lineinfile:
        path: /etc/X11/Xsession.options
        line: use-ssh-agent
        state: absent

    - file:
        state: directory
        path: /home/liw/.config/autostart
        owner: liw
        group: liw

    - copy:
        content: |
          [Desktop Entry]
          Type=Application
          Name=gpg-agent
          Comment=gpg-agent
          Exec=/usr/bin/gpg-agent --daemon
          OnlyShowIn=GNOME;Unity;MATE;
          X-GNOME-Autostart-Phase=PreDisplayServer
          X-GNOME-AutoRestart=false
          X-GNOME-Autostart-Notify=true
          X-GNOME-Bugzilla-Bugzilla=GNOME
          X-GNOME-Bugzilla-Product=gnome-keyring
          X-GNOME-Bugzilla-Component=general
          X-GNOME-Bugzilla-Version=3.20.0
        dest: /home/liw/.config/autostart/gpg-agent.desktop
        owner: liw
        group: liw

  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: x220
    sane_debian_system_codename: bullseye
    sane_debian_system_timezone: Europe/Helsinki
    sane_debian_system_sources_lists:
      - repo: |
          deb http://deb.debian.org/debian bullseye contrib non-free

      - repo: |
          deb-src http://deb.debian.org/debian bullseye main contrib non-free

      - repo: |
          deb http://security.debian.org/debian-security bullseye-security main contrib non-free

      - repo: |
          deb http://code.liw.fi/debian unstable main
        signing_key: "{{ code_liw_fi_signing_key }}"

      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
        signing_key: "{{ ci_prod_signing_key }}"

      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable main
        signing_key: "{{ ci_prod_signing_key }}"

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius
        sudo: yes
        groups:
          - dialout
        authorized_keys: |
          {{ liw_personal_ssh_pub }}

    mailname: exolobe1.liw.fi

    hostname: "{{ sane_debian_system_hostname }}"
    relayhost: pieni.net:587
    smarthost: pieni.net
    smarthost_user: pienirelay
    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"