---
- name: configure over pct
  hosts: router
  gather_facts: false
  roles:
    - authorized_key
    - ifupdown2

- name: configure over ssh
  hosts: router
  vars:
    ansible_connection: ssh
    ansible_host: "{{ container_ip }}"
    ansible_user: root
    ansible_ssh_private_key_file: ~/.ssh/id_ed25519
    ansible_ssh_common_args: '-o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no'
  roles:
    - timezone
    - locales
    - sysctl
    - xray-core
    - xray-client
    - logrotate
    - dnsmasq
    - xray-lists
    - unbound
    - wireguard-tools
    - zerotier-one
    - nftables