---
- name: Set timezone
  community.general.timezone:
    name: "{{ timezone }}"

- name: Configure NTP
  ansible.builtin.template:
    src: timesyncd.conf.j2
    dest: /etc/systemd/timesyncd.conf
    mode: "0644"
  notify: restart timesyncd

- name: Update apt cache
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600

- name: Install common packages
  ansible.builtin.apt:
    name: "{{ common_packages }}"
    state: present

- name: Load br_netfilter module
  community.general.modprobe:
    name: br_netfilter
    persistent: present

- name: Configure sysctl for k8s
  ansible.posix.sysctl:
    name: "{{ item.key }}"
    value: "{{ item.value }}"
    sysctl_set: true
    reload: true
  loop:
    - { key: net.bridge.bridge-nf-call-iptables, value: "1" }
    - { key: net.bridge.bridge-nf-call-ip6tables, value: "1" }
    - { key: net.ipv4.ip_forward, value: "1" }
    - { key: fs.inotify.max_user_instances, value: "512" }
    - { key: fs.inotify.max_user_watches, value: "524288" }

- name: Disable swap
  ansible.builtin.command: swapoff -a
  changed_when: false

- name: Remove swap from fstab
  ansible.builtin.lineinfile:
    path: /etc/fstab
    regexp: '\sswap\s'
    state: absent

- name: Enable iscsid service (for Longhorn)
  ansible.builtin.systemd:
    name: iscsid
    enabled: true
    state: started