---
- hosts: mailu_hosts
  become: yes
  roles:
    - role: justin_p.mailu

---
- hosts: mailu_hosts
  become: yes
  tasks:
    - name: Run 'robertdebock.update_package_cache'-role
      ansible.builtin.include_role:
        name: robertdebock.update_package_cache

    - name: Run 'robertdebock.core_dependencies'-role
      ansible.builtin.include_role:
        name: robertdebock.core_dependencies

    - name: Run 'robertdebock.bootstrap'-role
      ansible.builtin.include_role:
        name: robertdebock.bootstrap

    - name: Run 'robertdebock.epel'-role
      ansible.builtin.include_role:
        name: robertdebock.epel

    - name: Run 'robertdebock.update'-role
      ansible.builtin.include_role:
        name: robertdebock.update
      vars:
        update_reboot: false

    - name: Run 'robertdebock.firewall'-role
      ansible.builtin.include_role:
        name: robertdebock.firewall
      vars:
        firewall_services:
          - name: ssh  #  and other rules for mailu, but you can figure that out yourself.

    - name: Run 'robertdebock.hostname'-role
      ansible.builtin.include_role:
        name: robertdebock.hostname
      vars:
        hostname: mailhost.domain.tld
        hostname_reboot: true

    - name: Flush handlers triggered turing bootstrap
      meta: flush_handlers

    - name: Install and harden docker
      include_role:
        name: justin_p.bootstrap_docker
      vars:
        bsd_docker_username: docker_user
        bsd_docker_password: StrongPassword01!
        bsd_docker_password_salt: SomeSaltsPlease
        bsd_docker_iptables_template: "{{ playbook_dir }}/templates/rules.v4.j2"

    - name: Flush handlers triggered turing bootstrap_docker
      meta: flush_handlers

    - name: Install mailu
      include_role:
        name: justin_p.mailu
      vars:
        mailu_docker_subnet: "{{ docker_subnet }}" # 172.18.0.0/16
        mailu_docker_user: docker_user
        mailu_install_path: /home/docker_user/mailu
        mailu_env_secret_key: 16_char_random_long_string
        mailu_env_hostnames: mailhost.domain.tld
        mailu_env_mail_domain: domain.tld
        mailu_initial_admin_password: StrongPassword01!