- name: Desktop Configuration
  hosts: localhost
  gather_facts: true
  become: true
  become_method: ansible.builtin.sudo
  become_user: root
  vars_files:
    - ../homelab-vault/secrets.yml
  tasks:
    - name: OpenSSH Hardening
      ansible.builtin.import_tasks: ../roles/openssh.yml
    - name: Install Homebrew
      when: ansible_os_family == "Darwin"
      changed_when: false
      ansible.builtin.shell:
        cmd: /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
        args:
          executable: /bin/bash
    - name: Install Homebrew Packages
      when: ansible_os_family == "Darwin"
      community.general.homebrew:
        name: "{{ item }}"
        state: latest
      loop:
        - git
        - wget
        - python3
        - ansible
        - neovim
        - bash-completion
        - ssh-copy-id
        - gpg
    - name: Install Homebrew Cask Apps
      when: ansible_os_family == "Darwin"
      community.general.homebrew_cask:
        name: "{{ item }}"
        state: present
      loop:
        - iterm2
        - google-chrome
        - google-drive
        - visual-studio-code
        - obsidian
        - nextcloud
        - gnucash