From 88f40fe0cd68d0b2bb529f06024e694c1768beef Mon Sep 17 00:00:00 2001
From: Christoph <ckubu@oopen.de>
Date: Thu, 6 Aug 2026 14:49:53 +0200
Subject: [PATCH] feat: update apt packages for webserver and add extra Python
 packages

---
 group_vars/all/main.yml                   | 135 +++++++++++-----------
 host_vars/ki-fm.oopen.de/ki-fm-common.yml |   9 ++
 2 files changed, 77 insertions(+), 67 deletions(-)

diff --git a/group_vars/all/main.yml b/group_vars/all/main.yml
index 051d84a..df45a4d 100644
--- a/group_vars/all/main.yml
+++ b/group_vars/all/main.yml
@@ -1728,87 +1728,88 @@ apt_webserver_pkgs:
 
 
 apt_webserver_pkgs_trixie:
-  - libdb-dev
-  - zlib1g
-  - zlib1g-dev
-  - libssl-dev
-  - libneon27-dev
-  - libxml2
-  - libxml2-dev
+  - build-essential
   - curl
-  - libcurl4-openssl-dev
-  - libqdbm-dev
-  - libgdbm-dev
-  - libpspell-dev
-  - libjpeg-dev
-  - libpng-dev
-  - libxpm-dev
-  - libfreetype6-dev
-  - libwmf-dev
-  - libtiff-dev
-  - libpaper-dev
-  - libmagic-dev
-  - libgraphics-magick-perl
-  - libgraphicsmagick++1-dev
-  - libgraphicsmagick-q16-3
-  - libgraphicsmagick1-dev
-  - libgraphviz-dev
-  - libgsf-1-dev
-  - libilmbase-dev
-  - libvpx-dev
-  - vpx-tools
-  - libgpm-dev
-  - libkpathsea-dev
-  - libopenexr-dev
-  - librsvg2-dev
-  - libdjvulibre-dev
-  - libatm-dev
-  - libexpat-dev
-  - imagemagick
-  - graphicsmagick
-  - exif
-  - libexiv2-dev
-  - re2c
-  - netpbm
-  - libnetpbm-dev
-  - libmcrypt-dev
-  - mcrypt
   - default-libmysqlclient-dev
-  - libpq-dev
-  - postgresql-client
-  - libreadline-dev
-  - libncurses-dev
+  - exif
+  - expect
+  - expect-dev
+  - ffmpeg
+  - graphicsmagick
+  - imagemagick
+  - libaio-dev
+  - libapr1-dev
+  - libaprutil1-dev
+  - libatm-dev
+  - libcrypto++-dev
+  - libcurl4-openssl-dev
   - libdb5.3
   - libdb5.3++
   - libdb5.3++-dev
   - libdb5.3-dev
-  - libxslt1-dev
-  - libpcre2-dev
-  - libicu-dev
-  - libtidy-dev
-  - libmm-dev
+  - libdb-dev
+  - libdjvulibre-dev
+  - libexiv2-dev
+  - libexpat-dev
+  - libexpect-perl
+  - libfreetype6-dev
+  - libgdbm-dev
+  - libgd-dev
+  - libgeoip-dev
   - libgmp-dev
+  - libgpm-dev
+  - libgraphicsmagick++1-dev
+  - libgraphicsmagick1-dev
+  - libgraphics-magick-perl
+  - libgraphicsmagick-q16-3
+  - libgraphviz-dev
+  - libgsf-1-dev
+  - libicu-dev
+  - libilmbase-dev
+  - libjpeg-dev
+  - libkpathsea-dev
   - libkrb5-dev
   - libldap-dev
-  - libmhash-dev
-  - libgd-dev
   - liblua5.3-dev
-  - libapr1-dev
-  - libaprutil1-dev
-  - libsctp-dev
-  - libcrypto++-dev
-  - ffmpeg
+  - libmagic-dev
   - libmagickwand-dev
-  - libgeoip-dev
-  - libaio-dev
-  - tk-dev
+  - libmcrypt-dev
+  - libmhash-dev
+  - libmm-dev
+  - libncurses-dev
+  - libneon27-dev
+  - libnetpbm-dev
+  - libopenexr-dev
+  - libpaper-dev
+  - libpcre2-dev
+  - libpng-dev
+  - libpq-dev
+  - libpspell-dev
+  - libqdbm-dev
+  - libreadline-dev
+  - librsvg2-dev
+  - libsctp-dev
+  - libssl-dev
+  - libtidy-dev
+  - libtiff-dev
+  - libvpx-dev
+  - libwmf-dev
+  - libxml2
+  - libxml2-dev
+  - libxpm-dev
+  - libxslt1-dev
+  - mcrypt
+  - netpbm
+  - poppler-utils
+  - postgresql-client
+  - re2c
   - tcl-dev
   - tclreadline
-  - expect
-  - expect-dev
-  - libexpect-perl
-  - poppler-utils
+  - tk-dev
+  - vpx-tools
   - weasyprint
+  - zlib1g
+  - zlib1g-dev
 
 #  - libc-client2007e-dev
 #  - libc-client-dev
diff --git a/host_vars/ki-fm.oopen.de/ki-fm-common.yml b/host_vars/ki-fm.oopen.de/ki-fm-common.yml
index 7d68d98..1529a53 100644
--- a/host_vars/ki-fm.oopen.de/ki-fm-common.yml
+++ b/host_vars/ki-fm.oopen.de/ki-fm-common.yml
@@ -25,6 +25,15 @@ sshd_permit_root_login: !!str "prohibit-password"
 # vars used by apt.yml
 # ---
 
+apt_install_extra_pkgs: true
+apt_extra_pkgs:
+  - python3
+  - python3-venv
+  - python3-pip
+  - build-essential
+  - libxml2-dev
+  - libxslt1-dev
+
 
 # ---
 # vars used by roles/common/tasks/systemd-resolved.yml