---
- name: Mise à jour APT
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600
  tags: common

- name: Déployer /etc/apt/sources.list
  ansible.builtin.copy:
    src: files/sources.list
    dest: /etc/apt/sources.list
    owner: root
    group: root
    mode: '0644'
    backup: yes
  tags: common

- name: Mettre à jour le cache APT
  ansible.builtin.apt:
    update_cache: yes
  when: apt_update_cache
  tags: common

- name: Mettre à jour tous les paquets
  ansible.builtin.apt:
    upgrade: dist
  when: apt_upgrade
  tags: common

- name: Paquets de base
  ansible.builtin.apt:
    name:
      - rsyslog
      - ca-certificates
      - curl
      - wget
      - gnupg
      - git
      - vim
      - htop
      - btop
      - fail2ban
      - resolvconf
      - wireguard
      - python3-venv
    state: present
  tags: common