# ansible/playbook-dev.yml

- name: 로컬 개발환경 설정
  hosts: all
  become: true
  vars_files:
    - vars/main.yml

  tasks:
    - name: Docker 패키지 설치
      ansible.builtin.apt:
        name:
          - docker-ce
          - docker-ce-cli
          - containerd.io
          - docker-buildx-plugin
          - docker-compose-plugin
        state: present

    - name: Docker 서비스 시작 및 활성화
      ansible.builtin.systemd:
        name: docker
        state: started
        enabled: true

    - name: 사용자를 docker 그룹에 추가
      ansible.builtin.user:
        name: "{{ dev_user }}"
        groups: docker
        append: true

    - name: Python 패키지 설치
      ansible.builtin.apt:
        name:
          - python3
          - python3-pip
          - python3-venv
        state: present

# ansible/playbook-prod.yml

- name: Oracle Linux 9 서버 초기 설정
  hosts: prod
  become: true
  vars_files:
    - vars/prod.yml

  tasks:
    - name: 타임존 설정 (Asia/Seoul)
      community.general.timezone:
        name: "{{ timezone }}"

    - name: SELinux 비활성화
      ansible.posix.selinux:
        state: disabled

    - name: 방화벽(firewalld) 중지 및 비활성화
      ansible.builtin.systemd:
        name: firewalld
        state: stopped
        enabled: false
      ignore_errors: true

    - name: Docker 패키지 설치
      ansible.builtin.dnf:
        name:
          - docker-ce
          - docker-ce-cli
          - containerd.io
          - docker-buildx-plugin
          - docker-compose-plugin
        state: present

# ansible/vars/prod.yml

timezone: "Asia/Seoul"
docker_user: "opc"

swap_file_path: "/swapfile"
swap_size_mb: 8192

base_packages:
  - git
  - curl
  - vim
  - net-tools

# ansible/ansible.cfg

[defaults]
host_key_checking = False
interpreter_python = auto_silent

[ssh_connection]
ssh_args = -o ControlMaster=auto -o ControlPersist=60s