---

- name: system setup
  tags:
    - packages
  block:
    - name: misc packages
      apt:
        name: "{{ item }}"
        install_recommends: no
      with_items:
        - systemd-cron
        - ca-certificates
        - unzip
        - sudo

- name: disable ipv6
  tags:
    - disable-ipv6
  copy:
    dest: /etc/sysctl.d/99-disable-ipv6.conf
    content: net.ipv6.conf.all.disable_ipv6=1
  notify: restart sysctl

# TODO: unattended upgrades, postfix client