- name: Remove some packages
  apt: pkg={{ packages }} state=absent purge=yes
  vars:
    packages:
    - aptitude
    - byobu
    - at
    - bc
    - cryptsetup*
    - mdadm
    - netcat-traditional
    - nano
    - emacs-*
    - hc-utils
    - shorewall
    - iptables
    - lvm2
    - dosfstools
    - eatmydata
    - acpid
    - acl
    - fdisk
    - gdisk
    - genisoimage
    - gnupg*
    - gpg-wks-*
    - mtr-tiny
    - net-tools
    - mtr-tiny
    - net-tools
    - xfsprogs
    - traceroute
    - wget
    - python3-lib2to3
    - efibootmgr
    - busybox
    - console-setup
    - debconf-i18n
    - dmidecode
    - task-*
    - tasksel-*
    - inetutils-telnet
    - os-prober
    ##
    - chkrootkit
    - debian-faq
    - debian-handbook
    - debian-policy
    - debian-reference
    - doc-debian
    - iamerican
    - ibritish
    - ienglish-common
    - installation-report
    - laptop-detect
    - lynx
    - manpages-de
    - mutt
    - reportbug
    - rkhunter
    - vnstati
    - wmanx
    - python3-reportbug
    - python3-debianbts
    - locales-all
    ##
    - wamerican
    - wamerican-huge
    - wamerican-insane
    - wamerican-large
    - wamerican-small
    - wbrazilian
    - wbritish
    - wbritish-huge
    - wbritish-insane
    - wbritish-large
    - wbritish-small
    - wbulgarian
    - wcanadian
    - wcanadian-huge
    - wcanadian-insane
    - wcanadian-large
    - wcanadian-small
    - wcatalan
    - wdanish
    - wdutch
    - wfaroese
    - wfrench
    - wgaelic
    - wgalician-minimos
    - wgerman-medical
    - wirish
    - witalian
    - wngerman
    - wnorwegian
    - wogerman
    - wpolish
    - wportuguese
    - wspanish
    - wswedish
    - wswiss
    - wukrainian
    - xauth

- name: Install some common packages
  apt: pkg={{ packages }}
  vars:
    packages:
        - bind9-dnsutils
        - bzip2
        - htop
        - ca-certificates
        - rsync
        - python3
        - less
        - iproute2
        - git
        - curl
        - screen
        - sudo
        - vim-nox
        - qemu-guest-agent
        # Useful for `getent passwd dynamic_user`
        - libnss-systemd

- name: Set /etc/timezone
  copy: dest=/etc/timezone content="Europe/Stockholm\n"
        owner=root group=root
        mode=0644

- name: Remove ~root/.ssh/authorized_keys
  file: path=/root/.ssh/authorized_keys state=absent

- name: Disable root password
  user: name=root password="!" update_password=always

- name: Set RESUME=none in initramfs.conf
  copy: dest=/etc/initramfs-tools/conf.d/resume content="RESUME=none\n"
        owner=root group=root
        mode=0644
  notify: Update initramfs