---
- name: "Enable passwordless sudo on AlmaLinux"
  ansible.builtin.lineinfile:
    path: /etc/sudoers
    state: present
    regexp: "^%wheel"
    line: "%wheel ALL=(ALL) NOPASSWD: ALL"
    validate: "visudo -cf %s"

- name: Install EPEL repo
  ansible.builtin.yum:
    name: epel-release
    state: present

- name: Upgrade all packages
  ansible.builtin.dnf:
    name: "*"
    state: latest

- name: Install required software
  ansible.builtin.dnf:
    state: present
    name:
      - bind-utils
      - lsof
      - htop
      - btop
      - mosh
      - rsync
      - tmux
      - nano
      - the_silver_searcher
      - net-tools
      - mlocate
      - fail2ban
      - munin-node
      - nethogs
      - pv
      - selinux-policy
      - tar
      - unzip
      - qemu-guest-agent
      - python3-libselinux

- name: Create a user for andys
  ansible.builtin.user:
    name: andy
    groups:
      - wheel
    state: present
# - name: Put SELinux in permissive mode, logging actions that would be blocked.
#   ansible.posix.selinux:
#     policy: targeted
#     state: permissive