---
- name: Perform regular maintenance
  hosts: virtual
  remote_user: ansible
  
  vars_files:
    ../inventory/group_vars/all/secrets.yaml
  
  roles:
    # Check the Internet connection
    # Check free disk space
    - ../roles/common_healthcheck
    # Ensure that all the required packages are installed
    - ../roles/base_system
    # Update the system
    - ../roles/update_system
    # Harden SSH - we must be sure that the last version of ssh configs are distributed
    - ../roles/harden_ssh
    # Update configs - omz, nvim, ranger and so on. Distribute the last version of those configs
    - ../roles/update_configs
    # Make sure that the services that are supposed to run are running
    - ../roles/check_services

- name: Ensure all web-servers have fresh TLS certificates
  hosts: web-servers
  remote_user: ansible
  
  vars_files:
    ../inventory/group_vars/all/secrets.yaml
  
  roles:
    # Pull certificates from cert_proxy and distribute them among the servers
    - ../roles/update_certificates