---
- name: Set up VPS
  hosts: all
# gather_facts: true
  vars_files:
    - vars/secrets.yaml
  become: true

# ----------------------------------------------------------------------------------------------------

  pre_tasks:
    - name: Install packages
      apt:
        name:
          - iputils-ping
          - cron
          - fzf
          - git
          - curl
          - zip
          - unzip
          - trash-cli
        state: latest
        install_recommends: false
        update_cache: true
        autoclean: true
        autoremove: true

    - name: Touch .hushlogin
      file:
        path: "/home/{{ user }}/.hushlogin"
        state: touch
# ----------------------------------------------------------------------------------------------------

  roles:
    - neovim
    - disable-root
    - timezone
    - chrony
    - hostname
    - systemd-resolved
    - sources-list
    - ssh
    - ufw-opnxng
    - fail2ban
    - unattended-upgrades
    - nfs-opnxng
    - docker
    #- docker-buildx