# provision a new kernel-qa system
# NOTE: this assumes the kernel-qa boxes are already up and are accessible
# NOTE: most of these vars come from group_vars/kernel-qa or from hostvars

- name: make kernel-qa
  hosts: kernel-qa
  user: root
  gather_facts: True

  vars_files: 
   - /srv/web/infra/ansible/vars/global.yml
   - "{{ private }}/vars.yml"
   - "{{ vars }}/{{ ansible_distribution }}.yml"

  roles:
  - /srv/web/infra/ansible/roles/base
  - /srv/web/infra/ansible/roles/rkhunter
  - /srv/web/infra/ansible/roles/denyhosts
  - /srv/web/infra/ansible/roles/nagios_client
  - /srv/web/infra/ansible/roles/fas_client

  tasks:
  # this is how you include other task lists
  - include: "{{ tasks }}/hosts.yml"
  - include: "{{ tasks }}/yumrepos.yml"
  - include: "{{ tasks }}/2fa_client.yml"
  - include: "{{ tasks }}/motd.yml"
  - include: "{{ tasks }}/sudo.yml"


  handlers:
  - include: "{{ handlers }}/restart_services.yml"