---

- name: (basic.yml) Ensure timezone is is correct
  timezone: name={{ time_zone }}
  tags:
    - timezone


- name: (basic.yml) Ensure locales are present
  locale_gen:
    name: "{{ item }}"
    state: present
  with_items: "{{ locales }}"
  tags:
    - locales

- name: (basic.yml) Create a symbolic link /bin/sh -> bash
  file:
    src: bash
    dest: /bin/sh
    owner: root
    group: root
    state: link
  tags:
    - symlink-sh

- name: (basic.yml) Check file '/etc/systemd/system.conf' exists
  stat:
    path: /etc/systemd/system
  register: etc_systemd_system_conf
  when:
    - set_default_limit_nofile|bool == true

- name: (basic.yml) Change DefaultLimitNOFILE to 1048576
  lineinfile:
    dest: /etc/systemd/system.conf
    state: present
    regexp: '^DefaultLimitNOFILE'
    line: 'DefaultLimitNOFILE=1048576'
    insertafter: '^#DefaultLimitNOFILE'
  when:
    - set_default_limit_nofile|bool == true
    -  etc_systemd_system_conf.stat.exists == true
  tags:
    - systemd-nofiles

- name: (basic.yml) Check file '/etc/security/limits.conf.ORIG' exists
  stat:
    path: /etc/security/limits.conf.ORIG
  register: etc_security_limits_conf_ORIG
  tags:
    - limits-conf

- name: (basic.yml) Backup installation version of file '/etc/security/limits.conf'
  command: cp -a /etc/security/limits.conf /etc/security/limits.conf.ORIG
  when: etc_security_limits_conf_ORIG.stat.exists == False
  tags:
    - limits-conf

- name: (basic.yml) Create new sshd_config from template limits.conf.j2
  template:
    src: etc/security/limits.conf.j2
    dest: /etc/security/limits.conf
    owner: root
    group: root
    mode: 0644
  tags:
    - limits-conf