---
- name: Set timezone
  community.general.timezone:
    name: "{{ timezone }}"
  become: true

- name: Enable and start chronyd
  ansible.builtin.systemd:
    name: chronyd
    state: started
    enabled: true
  become: true

- name: Update all packages
  ansible.builtin.package:
    name: "*"
    state: latest
  become: true

- name: Install baseline packages
  ansible.builtin.package:
    name: "{{ baseline_packages }}"
    state: present
  become: true

- name: Disable root SSH login
  ansible.builtin.lineinfile:
    path: /etc/ssh/sshd_config
    regexp: '^PermitRootLogin'
    line: "PermitRootLogin no"
  become: true
  notify: Restart sshd