---
- name: Deploy KVM virtual machines
  ansible.builtin.import_playbook: include/deploy-kvm-guest.yml
  vars:
    myhosts: shell

- name: Configure instance
  hosts: shell
  user: root
  gather_facts: true

  vars_files:
    - "{{ ansible_private }}/vars.yml"

  roles:
    - base
    - role: keytab
      principals:
        - "host/{{ inventory_hostname }}@{{ kerberos_realm }}"
        - "nfs/{{ inventory_hostname }}@{{ kerberos_realm }}"
    - nfs_client
    - sssd
    - autofs
    - thinlinc_server
    - epel_repo
    - foosh_repo
    - powertools_repo
    - role: nginx/server
      plaintext: true

  tasks:
    - name: Install extra package groups
      ansible.builtin.dnf:
        name:
          - "@development"
          - "@fonts"
          - "@gnome-desktop"
          - "@workstation-product"
        state: installed
        exclude:
          - fprintd-pam
          - gnome-initial-setup

    - name: Install extra packages
      ansible.builtin.package:
        name: "{{ package }}"
        state: installed
      with_items:
        - ansible
        - ansible-collection-ansible-posix
        - convmv
        - elinks
        - emacs
        - gnupg1
        - irssi
        - jq
        - kernel-doc
        - libreoffice-calc
        - libreoffice-draw
        - libreoffice-impress
        - libreoffice-voikko
        - libreoffice-writer
        - pandoc
        - php-cli
        - python3-netaddr
        - rcs
        - rpmlint
        - syslinux
        - tcsh
        - texlive
        - tmux
        - whois
        - wireshark
        - wkhtmltopdf
        - yamllint
        - zsh
      loop_control:
        loop_var: package

    - name: Add software packaged in roles
      ansible.builtin.include_role:
        name: "{{ role }}"
      with_items:
        - cups
        - firefox
        - git
        - google_chrome
        - lynx
        - mutt
        - opencollab
        - thunderbird
      loop_control:
        loop_var: role

    - name: Add home.foo.sh hosts to ssh config
      ansible.builtin.copy:
        dest: /etc/ssh/ssh_config.d/home.foo.sh.conf
        content: |
          Host *.home.foo.sh !gw.home.foo.sh
            ProxyJump root@gw.home.foo.sh
        mode: "0644"
        owner: root
        group: "{{ ansible_wheel }}"