- name: Configure virtual machine or host (not LXC)
  when: ansible_virtualization_role == 'host' or ansible_virtualization_type == 'kvm'
  block:
    - import_tasks: hostname.yml
      tags: hostname
    - import_tasks: sysctl.yml
      tags: sysctl
    - import_tasks: apparmor.yml
      tags: apparmor

- name: Configure base system (all)
  block:
    - import_tasks: witness.yml
      tags: witness
    - import_tasks: root.yml
      tags: root
    - import_tasks: resolv.yml
      tags: resolv
    - import_tasks: timesync.yml
      tags: timesync
    - import_tasks: sshd_configure.yml
      tags: sshd_configure
    - import_tasks: defuser.yml
      tags: defuser
    - import_tasks: install.yml
      tags: install
    - import_tasks: locale.yml
      tags: locale
    - import_tasks: tzdata.yml
      tags: tzdata
    - import_tasks: relayhost.yml
      tags: relayhost
    - import_tasks: motd.yml
      tags: motd
    - import_tasks: profile.yml
      tags: profile
    - import_tasks: vim.yml
      tags: vim
    - import_tasks: nrpe.yml
      tags: nrpe
    - import_tasks: fail2ban.yml
      tags: fail2ban
    - import_tasks: bacula.yml
      tags: bacula
    - import_tasks: vn-repo.yml
      tags: vn-repo

- name: Configure guest
  when: ansible_virtualization_role == 'guest'
  block:
    - import_tasks: auth.yml
      tags: auth
    - import_tasks: sudoers.yml
      tags: sudoers
    - import_tasks: ssh_keys.yml
      tags: ssh_keys

- name: Configure virtual machine
  when: ansible_virtualization_role == 'guest' and ansible_virtualization_type == 'kvm'
  block:
    - import_tasks: agent.yml
      tags: agent
    - import_tasks: hotplug.yml
      tags: hotplug
    - import_tasks: autofs.yml
      tags: autofs
    - import_tasks: blacklist.yml
      tags: blacklist
    - import_tasks: grub_startup.yml
      tags: grub_startup