ansible/site.yml

---

- name: Include configuration for local repository
  import_playbook: playbooks/local.yml

- name: Configure secure root access to hosts
  hosts: bootstrap
  gather_facts: no
  roles:
    - role: bootstrap

- hosts: all
  strategy: free
  roles:
    - role: hostname
      fqdn: "{{ inventory_hostname }}"
    - role: common
    - role: fail2ban/application
    - role: account
      username: "{{ global_username }}"
      password: "{{ zocker_password }}"
      authorized_keys: "{{ zocker_authorized_keys_url }}"
      sudo: yes
    - role: misc/ssh_tg_notify
      recipient_id: "{{ zocker_telegram_id }}"

# Group specific configurations
- name: Include configuration for group bwcloud
  import_playbook: playbooks/group_bwcloud.yml
- name: Include configuration for group surface3
  import_playbook: playbooks/group_surface3.yml
- name: Include configuration for group os_raspbian
  import_playbook: playbooks/group_os_raspbian.yml

# Topic specific configurations
- name: Include wireguard network configuration
  import_playbook: playbooks/wireguard.yml
- name: Include dns configuration
  import_playbook: playbooks/dns.yml

# Host specific configurations
- name: Include configuration of nvak.banananet.work
  import_playbook: playbooks/host_nvak.banananet.work.yml
- name: Include configuration of rurapenthe.banananet.work
  import_playbook: playbooks/host_rurapenthe.banananet.work.yml

- hosts: hardie.eridon.banananet.work
  roles:
    - role: misc/ip_discover