---
- name: Basic Setup
  hosts: sk-2019
  roles:
  - role: base
  - role: sshd
  - role: zsh
  - role: admin-user
  - role: cryptdisk
  - role: zfs/base

### TODO:
#
# zfs create -o quota=30G storage/mysql
# zfs create -o quota=30G storage/automysqlbackup
# zfs create -o quota=300G storage/vmail
# zfs create -o quota=600G storage/www
# zfs create -o quota=40G storage/log
#
# mkdir -p   /var/lib/mysql /var/lib/automysqlbackup /var/vmail /var/www /var/log/ispconfig
# chmod 0000 /var/lib/mysql /var/lib/automysqlbackup /var/vmail /var/www /var/log/ispconfig
# chattr +i  /var/lib/mysql /var/lib/automysqlbackup /var/vmail /var/www /var/log/ispconfig
#
### add to /etc/fstab:
##
## /srv/storage/mysql            /var/lib/mysql             none  defaults,bind,x-systemd.automount,nofail    0 0
## /srv/storage/automysqlbackup  /var/lib/automysqlbackup   none  defaults,bind,x-systemd.automount,nofail    0 0
## /srv/storage/vmail            /var/vmail                 none  defaults,bind,x-systemd.automount,nofail    0 0
## /srv/storage/www              /var/www                   none  defaults,bind,x-systemd.automount,nofail    0 0
## /srv/storage/log              /var/log/ispconfig         none  defaults,bind,x-systemd.automount,nofail    0 0
#
# mount -a
#
#
### write script to /usr/local/bin/post-boot
##
## #!/bin/bash
## set -e
## cryptsetup luksOpen /dev/nvme0n1p3 crypto-nvme0
## cryptsetup luksOpen /dev/nvme1n1p3 crypto-nvme1
## systemctl restart zfs-import-cache.service
## systemctl restart zfs-mount.service
## mount -a
#
# chmod +x /usr/local/bin/post-boot
#