---
- name: Deploy KVM virtual machines
  ansible.builtin.import_playbook: include/deploy-kvm-guest.yml
  vars:
    myhosts: proxy

- name: Configure instance
  hosts: proxy
  user: root
  gather_facts: true

  vars_files:
    - "{{ ansible_private }}/vars.yml"

  roles:
    - base
    - ifstated
    - nginx/server
    - role: nginx/site
      site: ca.foo.sh
    - role: nginx/site
      site: foo.monster
    - role: nginx/site
      site: tuiradc.fi
      redirect: https://facebook.com/TuiraDC
    - role: nginx/site
      site: www.tuiradc.fi
      redirect: https://facebook.com/TuiraDC
    - role: nginx/site
      site: foo.sh
      redirect: https://www.foo.sh/
    - role: nginx/site
      site: autoconfig.foo.sh
    - role: nginx/site
      site: boot.foo.sh
      ssl_config: old
    - role: nginx/site
      site: bitbucket.foo.sh
      redirect: https://bitbucket.org/tmakinen/
    - role: nginx/site
      site: certbot.home.foo.sh
      proxy: https://certbot.home.foo.sh/
    - role: nginx/site
      site: chat.foo.sh
      proxy:
        - https://oci-node01.home.foo.sh/rocketchat/
        - https://oci-node02.home.foo.sh/rocketchat/
    - role: nginx/site
      site: collab.foo.sh
      proxy: https://collab01.home.foo.sh/
    - role: nginx/site
      site: devel01.foo.sh
      proxy: https://devel01.home.foo.sh/
    - role: nginx/site
      site: dns.home.foo.sh
      redirect: https://www.foo.sh/
    - role: nginx/site
      site: git.foo.sh
      proxy: https://gitea02.home.foo.sh/
    - role: nginx/site
      site: gitea.foo.sh
      redirect: https://git.foo.sh/
    - role: nginx/site
      site: ha.foo.sh
      proxy: https://homeassistant01.home.foo.sh/
    - role: nginx/site
      site: id.foo.sh
      proxy:
        - https://oci-node01.home.foo.sh
        - https://oci-node02.home.foo.sh
    - role: nginx/site
      site: influxdb.foo.sh
      proxy: https://influxdb01.home.foo.sh/
    - role: nginx/site
      site: iot.foo.sh
      redirect: https://www.foo.sh/
    - role: nginx/site
      site: munin.foo.sh
      proxy: https://munin01.home.foo.sh/
    - role: nginx/site
      site: mirrors.foo.sh
      proxy: https://mirror01.home.foo.sh/
    - role: nginx/site
      site: movies.foo.sh
      proxy:
        - https://oci-node01.home.foo.sh/php4dvd/
    - role: nginx/site
      site: noc.foo.sh
      proxy:
        - https://oci-node01.home.foo.sh/grafana/
        - https://oci-node02.home.foo.sh/grafana/
    - role: nginx/site
      site: print.foo.sh
      proxy: https://print01.home.foo.sh:631/
    - role: nginx/site
      site: registry.foo.sh
      proxy: ["registry01.home.foo.sh:5000", "registry02.home.foo.sh:5000"]
    - role: nginx/site
      site: webmail.foo.sh
      proxy:
        - https://oci-node01.home.foo.sh/roundcube/
    - role: nginx/site
      site: wpad.foo.sh
    - role: nginx/site
      site: www.foo.sh
    - role: nginx/site
      site: zm.foo.sh
      proxy: https://zm02.home.foo.sh/