---
- name: Deploy KVM virtual machines
  ansible.builtin.import_playbook: include/deploy-kvm-guest.yml
  vars:
    myhosts: mail

- name: Configure instance
  hosts: mail
  user: root
  gather_facts: true

  pre_tasks:
    - name: Mount /export
      ansible.posix.mount:
        name: /export
        src: LABEL=/export
        fstype: xfs
        opts: noatime,noexec,nosuid,nodev
        passno: "0"
        dump: "0"
        state: mounted

  vars_files:
    - "{{ ansible_private }}/vars.yml"

  roles:
    - base
    - role: keytab
      keytab_principals:
        - "host/{{ inventory_hostname }}@{{ kerberos_realm }}"
        - "smtp/{{ mail_server }}@{{ kerberos_realm }}"
    - nfs_client
    - sssd
    - autofs
    - dovecot
    - role: nginx
    - role: nginx_site
      nginx_site_name: "{{ mail_server }}"
      nginx_site_redirect: https://webmail.foo.sh/
    - grossd
    - opendkim
    - spamassassin
    - spamassassin_clamav
    - spamassassin_ixhash
    - spamassassin_pyzor
    - spamassassin_razor
    - spamassassin_textcat
    - sendmail
    - roles_lists