---
- name: Basic Setup
  hosts: ch-equinox-ws
  roles:
  - role: apt-repo/base
  - role: core/base
  - role: core/sshd
  - role: core/zsh
  - role: core/cpu-microcode
  - role: core/admin-users
  - role: network/wakeonlan
  - role: apt-repo/backports
  - role: apt-repo/spreadspace
  - role: apt-repo/tor-project
  - role: apt-repo/kubernetes
  - role: apt-repo/riot
  - role: ws/base
  post_tasks:
  - name: install ansible via pip
    pip:
      name: ansible

  - name: disable caps-lock
    lineinfile:
      path: /etc/default/keyboard
      regexp: '#?\s*XKBOPTIONS='
      line: 'XKBOPTIONS="caps:none"'

  - name: mount fileserver volumes
    mount:
      src: "{{ network_zones.lan.prefix | ipaddr(network_zones.lan.offsets['ch-prometheus']) | ipaddr('address') }}:/"
      path: /srv/files
      fstype: nfs4
      opts: nodev,x-systemd.automount,nofail
      state: mounted