- name: "Update package cache"
  apt:
    update_cache: "yes"

- name: "Upgrade to the latest packages"
  apt:
    upgrade: "dist"
    autoremove: "yes"

- name: "Install packages"
  apt:
    name: "{{ apt_packages }}"
    state: "present"

- name: "Allow tcp traffic on defined ports"
  ufw:
    rule: "allow"
    port: 22
    proto: "tcp"

- name: "Lock root user"
  command: "passwd -l root"

- name: "Blacklist the floppy driver module"
  kernel_blacklist:
    name: "floppy"
    state: "present"
  notify: "reconfigure initramfs"

- name: "Unload the floppy driver module"
  modprobe:
    name: "floppy"
    state: "absent"