---

- name: Configure package source
  template:
    src: "sources.{{ ansible_distribution_name }}.list"
    dest: "/etc/apt/sources.list"
    owner: root
    group: root
    mode: "u=rw,g=r,o=r"

- name: Update packages and install common packages
  apt:
    name:
      - acl # Required for temporary files by Ansible, see https://docs.ansible.com/ansible/latest/user_guide/become.html#risks-of-becoming-an-unprivileged-user
      - aptitude
      - apt-transport-https # TODO Can be removed after using only Debian >= buster due to feature integrated into apt
      - ca-certificates
      - cron
      - curl
      - dirmngr
      - dnsutils
      - git
      - gnupg2
      - pv # Required for scripting
      - python3
      - python3-apt # required for Ansible
      - python3-ipy # required for helper check_subnet.py
      - python3-pip
      - python3-yaml # required for scripting
      - sed # required for scripting
      - shellcheck
      - software-properties-common
      - unattended-upgrades
      - vim # required because will be configured as system-wide default editor
      - ufw
      - wget
    state: present
    allow_unauthenticated: no
    update_cache: yes
    cache_valid_time: 3600
    autoclean: yes
    autoremove: yes