---
- name: Set up VPS
  hosts: all
# gather_facts: true
  vars_files:
    - vars/secrets.yaml
  become: true

# ----------------------------------------------------------------------------------------------------

  pre_tasks:
    - name: Install packages
      apt:
        name:
          - neovim
          - iputils-ping
          - cron
          - git
          - curl
          - zip
          - unzip
          - trash-cli
        state: latest
        install_recommends: false
        update_cache: true
        autoclean: true
        autoremove: true

# ----------------------------------------------------------------------------------------------------

  roles:
    - disable-root
    - timezone
    - chrony
    - hostname
    - sources-list
    - ssh
    - ufw-opnxng
    - fail2ban
    - unattended-upgrades
    - nfs-opnxng
    - docker
    #- docker-buildx