---
- name: Mise à jour APT
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600
  tags: common

- name: Déployer /etc/apt/sources.list
  ansible.builtin.copy:
    src: files/sources.list
    dest: /etc/apt/sources.list
    owner: root
    group: root
    mode: '0644'
    backup: yes
  tags: common

- name: Attendre que le verrou APT soit libéré
  ansible.builtin.shell: while fuser /var/lib/apt/lists/lock /var/lib/dpkg/lock /var/lib/dpkg/lock-frontend > /dev/null 2>&1; do sleep 1; done
  changed_when: false
  tags: common

- name: Mettre à jour le cache APT
  ansible.builtin.shell:
    cmd: apt-get update
  become: yes
  changed_when: false
  tags: common

- name: Mettre à jour tous les paquets
  ansible.builtin.apt:
    upgrade: dist
  when: apt_upgrade
  tags: common

- name: Paquets de base
  ansible.builtin.apt:
    name:
      - rsyslog
      - ca-certificates
      - curl
      - wget
      - gnupg
      - git
      - vim
      - htop
      - btop
      - fail2ban
      - net-tools
      - resolvconf
      - wireguard
      - python3-venv
    state: present
  tags: common