- hosts: test
  vars:
    ansible_user: vagrant
    ansible_password: vagrant
    management_user_list:
      - name: admin
        shell: '/bin/bash'
        authorized_keys:
          - key: "ssh-rsa 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 stephane"
            exclusive: yes
        sudo:
          hosts: ALL
          as: ALL
          commands: ALL
          nopasswd: ALL
    netbird_setup_key: 26659E99-DED1-4ED4-B2D0-C0CC1246EFAE
    netbird_register: true
    node_exporter_tls_server_config:
      cert_file: /etc/node_exporter/tls.cert
      key_file: /etc/node_exporter/tls.key
    node_exporter_basic_auth_users:
      randomuser: examplepassword
    node_exporter_web_listen_address: 192.168.0.20:9100
  become: true
  gather_facts: true

  pre_tasks:

    - name: Create node_exporter cert dir
      file:
        path: "{{ item }}"
        state: directory
        owner: root
        group: root
      loop:
        - /etc/node_exporter

    - name: Generate an OpenSSL private key with the default values (4096 bits, RSA) and a passphrase
      community.crypto.openssl_privatekey:
        path: /etc/node_exporter/tls.key
        mode: 0644

# /etc/node_exporter# chmod 644 tls.key

    - name: Generate an OpenSSL Certificate Signing Request with a passphrase protected private key
      community.crypto.openssl_csr:
        path: /etc/node_exporter/tls.csr
        privatekey_path: /etc/node_exporter/tls.key
        common_name: www.ansible.com

    - name: Generate a Self Signed OpenSSL certificate
      community.crypto.x509_certificate:
        path: /etc/node_exporter/tls.cert
        privatekey_path: /etc/node_exporter/tls.key
        csr_path: /etc/node_exporter/tls.csr
        provider: selfsigned

# export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES ---> ERROR! A worker was found in a dead state

# chmod go+r /usr/share/keyrings/netbird-archive-keyring.gpg for error:
#||-----> GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available

  roles:
    # - robertdebock.update
    # - devsec.hardening.os_hardening
    # - devsec.hardening.ssh_hardening
    # - maxlareo.rkhunter
    # - maxlareo.chkrootkit
    # - robertdebock.auditd
    # - geerlingguy.firewall
    # - grog.management-user
    # - GROG.user
    # - GROG.authorized-key
    # - GROG.sudo
    # - ansible_unattended_upgrades
    # - dominion_solutions.netbird.netbird
    # - buluma.lynis
    - prometheus.prometheus.node_exporter
# https://galaxy.ansible.com/ui/repo/published/prometheus/prometheus/content/role/node_exporter/