---
- hosts: all
  vars_prompt:
    - name: def_user
      prompt: Enter username to use (ie. pi)
      private: no
    - name: def_pass
      prompt: Enter password to use
      private: yes
      encrypt: sha512_crypt
      confirm: yes
      unsafe: yes
      salt_size: 7

  tasks:
  - set_fact: def_username={{ def_user }}
    no_log: true
  - set_fact: def_password={{ def_pass }}
    no_log:

  - name: make direcotry
    file:
      path: "/home/{{ def_username }}/.ssh"
      owner: "{{ def_username }}"
      group: "{{ def_username }}"
      mode: '0700'
      state: directory
  - name: create empty file
    file:
      path: "/home/{{ def_username }}/.ssh/authorized_keys"
      owner: "{{ def_username }}"
      group: "{{ def_username }}"
      mode: '0644'
      state: touch
  - name: put pubkey
    lineinfile:
      path: "/home/{{ def_username }}/.ssh/authorized_keys"
      line: "{{ pubkey }}"
- hosts: update
  roles:
          - update
- hosts: netflows
  roles:
          - netflows
- hosts: all
  roles:
          - common
          - fail2ban
- hosts: public
  roles:
          - public
- hosts: samba-server
  roles:
          - samba-server
- hosts: smbclient
  roles:
          - smbclient
- hosts: pi
  roles:
          - vnc
          - domainname
          - pi
            #  vars_prompt:
            #    - name: rocommunity
            #      prompt: "Enter SNMP RO community name"
            #      default: "public"
- hosts: youtube
  roles:
          - youtube
- hosts: ftpclient
  roles:
          - ftpclient
- hosts: facebook
  roles:
          - facebook
- hosts: salesforce
  roles:
          - salesforce
- hosts: all
  roles:
          - nrpe
- hosts: sipclient
  roles:
          - sipp
          - sipclient
- hosts: sipserver
  roles:
          - sipp
          - sipserver
- hosts: ntopng
  roles:
          - ntopng
- hosts: ap
  roles:
          - ap
- hosts: snmpd
  roles:
          - snmpd
- hosts: tcgui
  roles:
          - tcgui