---
- name: Install packages
  ansible.builtin.package:
    name: nfs-utils
    state: installed

- name: Configure idmapd
  ansible.builtin.lineinfile:
    path: /etc/idmapd.conf
    regexp: '^#?Domain\s*=.*'
    line: "Domain = {{ mail_domain }}"

- name: Disable sending raw uid/gid to nfs server
  ansible.builtin.copy:
    dest: /etc/modprobe.d/nfs.conf
    content: "options nfs nfs4_disable_idmapping=0\n"
    mode: "0644"
    owner: root
    group: "{{ ansible_wheel }}"

- name: Allow gssproxy to connect kerberos servers over https
  ansible.posix.seboolean:
    name: nis_enabled
    state: true
    persistent: true

- name: Enable rpc-gssd services
  ansible.builtin.service:
    name: rpc-gssd
    state: started
    enabled: true