---
- name: Bootstrap personal environment
  hosts: all
  gather_facts: true

  roles:
    - role: core
      tags: [core]
    - role: deploy_user
      tags: [deploy_user]
    - role: initialize
      tags: [initialize]
    - role: locales
      tags: [locales]
    - role: firewall
      tags: [firewall]
    - role: swapfile
      tags: [swapfile]
    - role: certbot
      tags: [certbot]
    - role: v2ray
      tags: [v2ray]
    - role: nginx
      tags: [nginx]
    - role: docker_compose
      tags: [docker_compose]
    - role: umami_nginx
      tags: [umami_nginx]
    - role: nicholasclooney.umami
      tags: [umami]
      vars:
        umami_timezone: Europe/London
        umami_bind_address: 127.0.0.1
        umami_listen_port: 3000
    - role: tailscale_serve
      tags: [tailscale_serve]

    # Run this manually
    # - ssh_hardening