playbook.yml

---

- hosts: pi
  roles:
    - role: drew-kun.rpi_expandfs
      tags: rpi_expandfs

    - role: systemli.sshd
      tags: sshd
      when: ssh_key is defined

    - role: systemli.onion
      tags: onion
      when: ssh_key is defined

  tasks:
    - name: Add public ssh key
      authorized_key:
        user: pi
        key: "{{ lookup('file', '{{ ssh_key }}') }}"
      when: ssh_key is defined

    - name: Mount external HDD
      mount:
        path: /srv
        src: "{{ hdd }}"
        fstype: ext4
        opts: noatime,noexec,nosuid
        state: mounted
      when: hdd is defined

    - name: External HDD is owned by pi
      file:
        path: /srv
        state: directory
        recurse: true
        owner: pi
      when: hdd is defined

    - name: Install packages
      apt:
        name: "{{ packages }}"
        state: present

    - name: Uninstall watchdog daemon
      apt:
        name: watchdog
        state: absent
      tags: watchdog

    - name: Configure systemd watchdog
      lineinfile:
        path: /etc/systemd/system.conf
        regexp: "#?RuntimeWatchdogSec"
        line: "RuntimeWatchdogSec=20"
      tags: watchdog

- hosts: pi
  roles:
    - { role: jnv.unattended-upgrades, tags: unattended_upgrades }
    - { role: chmduquesne.transmission, tags: transmission }
    - { role: tschifftner.samba, tags: samba }
    - { role: t2d.raspotify, tags: raspotify }
    - { role: t2d.hifiberry, tags: hifiberry, when: hifiberry_enabled|bool }
    - { role: t2d.mopidy, tags: mopidy }
    - { role: t2d.tmux, tags: tmux }