---
# Common role - main tasks

- name: Include OS-specific variables
  ansible.builtin.include_vars: "{{ item }}"
  with_first_found:
    - "{{ ansible_distribution | lower }}-{{ ansible_distribution_major_version }}.yml"
    - "{{ ansible_distribution | lower }}.yml"
    - "{{ ansible_os_family | lower }}.yml"
    - "default.yml"
  ignore_errors: true

- name: Run package tasks
  ansible.builtin.include_tasks: packages.yml
  tags: [packages]

- name: Run timezone tasks
  ansible.builtin.include_tasks: timezone.yml
  tags: [timezone]

- name: Run user tasks
  ansible.builtin.include_tasks: users.yml
  tags: [users]
  when: common_users | length > 0

- name: Run SSH hardening tasks
  ansible.builtin.include_tasks: ssh.yml
  tags: [ssh, security]

- name: Run security tasks
  ansible.builtin.include_tasks: security.yml
  tags: [security]