---
- name: Include public variables.
  include_vars: ../public/vars.yml
  tags: accounts

- name: Install systemd-resolved.
  become: yes
  apt: pkg=systemd-resolved
  when:
  - ansible_distribution == 'Debian'
  - 11 < ansible_distribution_major_version|int

- name: Enable/Start systemd-networkd.
  become: yes
  systemd:
    service: systemd-networkd
    enabled: yes
    state: started

- name: Enable/Start systemd-resolved.
  become: yes
  systemd:
    service: systemd-resolved
    enabled: yes
    state: started

- name: Link /etc/resolv.conf.
  become: yes
  file:
    path: /etc/resolv.conf
    src: /run/systemd/resolve/resolv.conf
    state: link
    force: yes
  when:
  - ansible_distribution == 'Debian'
  - 12 > ansible_distribution_major_version|int

- name: Trust the institute CA.
  become: yes
  copy:
    src: ../Secret/CA/pki/ca.crt
    dest: /usr/local/share/ca-certificates/{{ domain_name }}.crt
    mode: u=r,g=r,o=r
    owner: root
    group: root
  notify: Update CAs.