---
- name: configure over ssh
  hosts: liqueur
  vars:
    ansible_connection: ssh
    ansible_host: "{{ container_ip }}"
    ansible_user: root
    ansible_ssh_private_key_file: ~/.ssh/id_ed25519
    ansible_ssh_common_args: >-
      -o UserKnownHostsFile=/dev/null
      -o StrictHostKeyChecking=no
      -o PreferredAuthentications=publickey,password
      -o PubkeyAuthentication=yes
  roles:
    - authorized_key
    - sshd
    - certbot
    - sysctl
    - nginx
    - nftables
    - stunnel4
    - openvpn
    - haproxy