---
- hosts: all
  vars:
    resolv_nameservers:
      - 9.9.9.9
      - 149.112.112.112
    chezmoi_init_url: https://git.fern.garden/fern/dots
  roles:
    - debian
    - lifeofguenter.resolvconf
    - hifis.toolkit.unattended_upgrades
    - hussainweb.chezmoi

- hosts: vm
  roles:
    - vm

- hosts: docker
  vars:
    docker_users:
      - fern
  roles:
    - geerlingguy.docker

- hosts: nfs-server
  vars:
    nfs_exports: [
      "/export/film 10.0.1.0/24(rw,subtree_check,insecure,no_root_squash,anonuid=100,anongid=100)",
      "/export/tv 10.0.1.0/24(rw,subtree_check,insecure,no_root_squash,anonuid=100,anongid=100)",
      "/export/misc 10.0.1.0/24(rw,subtree_check,insecure,no_root_squash,anonuid=100,anongid=100)"
    ]
  roles:
    - nfs-server
    - geerlingguy.nfs

- hosts: nfs-client
  roles:
    - nfs-client

- hosts: jellyfin.local
  roles:
    - tomhesse.jellyfin

- hosts: weebill.local
  tasks:
    - name: Install Webone dependencies
      ansible.builtin.apt:
        deb: https://packages.microsoft.com/config/debian/12/packages-microsoft-prod.deb
    - name: Install Webone
      ansible.builtin.apt:
        update_cache: yes
        deb: https://github.com/atauenis/webone/releases/download/v0.17.4/webone.0.17.4.linux-arm64.deb

- hosts: all
  tags:
    - ssh
  roles:
    - sshd