- name: Добавление SSH ключа
  ansible.posix.authorized_key:
    user: "{{ansible_user}}"
    key: "{{ lookup('file', playbook_dir + '/id_ed25519_simbirkey.pub') }}"
    state: present

- name: Установка необходимых пакетов
  ansible.builtin.apt:
    name:
      - ufw
      - openssl
      - openssh-server
      - tar
      - cron
    state: present
    update_cache: true
  become: true

- name: Разрешить SSH
  community.general.ufw:
    rule: allow
    name: openssh
  become: true

- name: Разрешить HTTP и HTTPS
  community.general.ufw:
    rule: allow
    port: "{{ item }}"
    proto: tcp
  become: true
  loop:
    - "80"
    - "443"

- name: Включение и запуск файрволла
  community.general.ufw:
    state: enabled
    default: deny
  become: true

- name: Перезагрузка файрволла
  ansible.builtin.command: ufw reload
  become: true

- name: Включение и запуск SSH
  ansible.builtin.systemd_service:
    name: ssh
    enabled: true
    state: started
  become: true

- name: Включение и запуск cron
  ansible.builtin.systemd_service:
    name: cron
    state: started
    enabled: true
  become: true

- name: Установка UTC для cron
  ansible.builtin.cron:
    name: CRON_TZ
    env: true
    job: UTC
  become: true