---
  - name: Set up pacman.conf
    vars:
      ansible_become_password: "{{ passwords[inventory_hostname] }}"
      ignorepkg: "{{ holdpackages | default('') }}"
    become: yes
    template:
      src: pacman.conf.j2
      dest: /etc/pacman.conf
      owner: root
      group: root
      mode: 0644
    when: ansible_os_family == "Archlinux"

  - name: Set mirror
    become: yes
    when: ansible_os_family == "Archlinux"
    copy:
      content: |
        Server = {{ mirroruri }}
      dest: /etc/pacman.d/mirrorlist.shadowarch
      owner: root
      group: root
      mode: 0644

  - name: Import AniNIX GPG key
    vars:
      ansible_become_password: "{{ passwords[inventory_hostname] }}"
    become: yes
    command: /bin/bash -c 'if [ ! -f /usr/share/pacman/keyrings/aninix.gpg ]; then mkdir /tmp/aninix; curl -s https://aninix.net/AniNIX/ShadowArch/raw/branch/main/EtcFiles/aninix.gpg > /tmp/aninix/pubring.gpg; pacman-key --import /tmp/aninix; pacman-key --lsign 904DE6275579CB589D85720C1CC1E3F4ED06F296; fi'
    when: ansible_os_family == "Archlinux"

  - name: Set up apt sources.list
    vars:
      ansible_become_password: "{{ passwords[inventory_hostname] }}"
    become: yes
    copy:
      content: |
        deb http://archive.raspberrypi.org/debian/ bullseye main
        # Uncomment line below then 'apt-get update' to enable 'apt-get source'
        #deb-src http://archive.raspberrypi.org/debian/ bullseye main
      dest: /etc/apt/sources.list.d/raspi.list
      owner: root
      group: root
      mode: 0644
    when: ansible_os_family == "Debian"

  - name: Base packages
    vars:
      ansible_become_method: su
      ansible_become_password: "{{ passwords[inventory_hostname] }}"
    become: yes
    package:
      name:
        - bash
        - sudo
        - git
        - tmux
        - vim
        - sysstat
        - iotop
        - lsof
        - rsync
        - xfsprogs
        - man
      state: present
      update_cache: yes