- name: Set up resolv.conf
  template:
    src: etc_resolv.conf.j2
    dest: /etc/resolv.conf
    owner: root
    group: wheel
    mode: "0644"
  register: resolv_conf

- name: Make resolv.conf immutable
  shell: chflags schg /etc/resolv.conf
  when: resolv_conf.changed

# TODO: this doesn't work without rc_conf having been run
#- name: Restart networking if interface configuration changed
#  shell: service netif restart && service routing restart
#  when: rc_conf.changed or resolv_conf.changed

- name: Set up sshd
  template:
    src: etc_ssh_sshd_config.j2
    dest: /etc/ssh/sshd_config
    owner: root
    group: wheel
    mode: "0644"
  register: etc_sshd_config

- name: Start sshd
  service:
    name: sshd
    state: started
  register: started_sshd

- name: Restart sshd
  service:
    name: sshd
    state: restarted
  when: not started_sshd.changed and etc_sshd_config.changed

- name: Start syslogd
  service:
    name: syslogd
    state: started
  register: started_syslogd

#- name: Restart syslogd
#  service:
#    name: syslogd
#    state: restarted
#  when: not started_syslogd.changed and rc_conf.changed

- name: Configure pf
  template:
    src: etc_pf.conf.j2
    dest: /etc/pf.conf
    owner: root
    group: wheel
    mode: "0644"
    backup: yes
  register: pf_conf

- name: Start pf
  service:
    name: pf
    state: started

- name: Reload pf rules
  shell: pfctl -f /etc/pf.conf
  when: pf_conf.changed

- name: Install hetzner_ddns.sh
  template:
    src: usr_local_bin_hetzner_ddns.sh.j2
    dest: /usr/local/bin/hetzner_ddns.sh
    owner: root
    group: wheel
    mode: "0755"

- name: Set up hetzner_auth
  template:
    src: usr_local_etc_hetzner_auth.j2
    dest: /usr/local/etc/hetzner_auth
    owner: root
    group: wheel
    mode: "0600"