---
# Harmonize my systems rather than doing everything manually. :)

# Everything
- name: Initial Setup
  hosts: localhost
  connection: local
  become: true  

  pre_tasks:
    - include: facts/general/system.yml
    - include: facts/general/package.yml
    - include: facts/general/service.yml
    - include: facts/general/user.yml

  tasks:
    - include: tasks/general/software/packages.yml
    - include: tasks/general/software/harden.yml
      ignore_errors: yes

    - include: tasks/general/acct_mgmt/groups.yml
    - include: tasks/general/acct_mgmt/users.yml
    - include: tasks/general/acct_mgmt/sudo.yml
    - include: tasks/general/acct_mgmt/keys.yml
    - include: tasks/general/acct_mgmt/mounts.yml

    - include: tasks/general/cron/ansible.yml


# Workstations
- name: UI Setup
  hosts: workstation
  connection: local
  become: true

  pre_tasks:
    - include: facts/workstation/system.yml
    - include: facts/workstation/package.yml
    - include: facts/workstation/service.yml
    - include: facts/workstation/user.yml

  tasks:
    - include: tasks/linux/software/flatpaks.yml
      when: ansible_system == "Linux" and
            flatpak_distro == "true"
    - shell: echo "Not implemented yet. :("
      when: ansible_system == "Linux" and
            flatpak_distro != "true"

    - include: tasks/freebsd/software/gui.yml
      when: ansible_system == "FreeBSD"


# Run Hardness Checks
- name: Hardening Check
  hosts: localhost
  connection: local
  become: true

  tasks:
    - include: tasks/general/hardness_checks/lynis.yml