- hosts: ui
  remote_user: root
  become: yes
  roles:
    - sane_debian_system
    - unix_users
    - comfortable
    - apache_server
    - ick_ui
  vars:
    hostname: ick

    wm_ssh_key_pub: "{{  lookup('pipe', 'pass show ick2/wm_ssh_key_pub') }}"

    unix_users:
      - username: root
        authorized_keys: |
          {{ wm_ssh_key_pub }}
          {{ demo_wm_ssh_key_pub }}
          {{ liw_ssh_key_pub }}
      - username: ivan
        sudo: yes
        authorized_keys: |
          {{ ivan_ssh_key_pub }}

    letsencrypt: yes
    letsencrypt_email: liw@liw.fi

    static_sites:
      - domain: ick-ui.vm.liw.fi
        owner: root
        ownermail: liw@liw.fi
        letsencrypt: yes

    sources_lists:
      - repo: "deb https://deb.nodesource.com/node_10.x stretch main"
        signing_key: "{{ nodesource_signing_key }}"