---
hostname: 'sky'

apt_repos_role:
  base:
    uri: 'https://deb.debian.org/debian'
    suite: '{{ apt_release|default(ansible_distribution_release) }}'
  security:
    uri: 'https://security.debian.org/debian-security'
    suite: '{{ apt_release|default(ansible_distribution_release) }}-security'
  updates:
    uri: 'https://deb.debian.org/debian'
    suite: '{{ apt_release|default(ansible_distribution_release) }}-updates'
  backports:
    uri: 'https://deb.debian.org/debian'
    suite: '{{ apt_release|default(ansible_distribution_release) }}-backports'

apt_sources_role:
  base:
    components:
    - main
    - contrib
    - non-free
  security:
    components:
    - main
    - contrib
    - non-free
  updates:
    components:
    - main
    - contrib
    - non-free

apt_packages_role:
  'nginx': present
  'certbot': present
  'ruby': present
  'bundler': present
  'curl': present

journald_conf_role:
  'Journal.Storage': 'persistent'

resolved_conf_role:
  'Resolve.FallbackDNS': '1.1.1.1 1.0.0.1 2606:4700:4700::1111 2606:4700:4700::1001'
  'Resolve.DNSSEC': 'yes'
  'Resolve.DNSOverTLS': 'no'
  'Resolve.MulticastDNS': 'no'
  'Resolve.LLMNR': 'no'

users:
  'esmil': sudo
  'ast': sudo
  'joshbuddy': sudo

domain_name: 'new.labitat.dk'
letsencrypt_email: 'josh@fireflop.com'

# vim: set ts=2 sw=2 et: