home-stack-ansible/roles/common/tasks/main.yml

- name: Install basic packages
  apt:
    update_cache: yes
    name:
      - curl
      - vim
      - tmux
      - gpg

- name: Set system journal limits
  lineinfile:
    path: /etc/systemd/journald.conf
    line: SystemMaxUse=1G
    regexp: '^#?SystemMaxUse='
  notify: Restart systemd-journald.service

- name: Set default editor to vim
  lineinfile:
    path: /etc/environment
    line: EDITOR=vim

- name: Disable root login
  user:
    name: root
    password: '*'

- name: Ensure sudoers is correctly configured
  lineinfile:
    path: /etc/sudoers
    line: '%sudo ALL=(ALL:ALL) ALL'
    regexp: '^%sudo\s+'
    validate: '/usr/sbin/visudo -cf %s'

- name: Configure users
  include_tasks: user.yml
  with_dict: '{{ users }}'

- name: Configure monitoring
  include_tasks: monitoring.yml

- name: Configure hostname
  hostname:
    name: '{{ inventory_hostname }}'

# - name: Configure hostname in /etc/hosts
#   blockinfile:
#     dest: /etc/hosts
#     marker: '# {mark} ANSIBLE MANAGED BLOCK HOSTNAME'
#     block: |
#       127.0.0.1 {{ inventory_hostname }}
#       ::1       {{ inventory_hostname }}