---
- hosts: ipa
  remote_user: root

  vars_files:
  - ../../passwords.yaml
  - ../../vars.yaml

  handlers:
  - name: reload firewalld
    command: firewall-cmd --reload

  tasks:
  - yum: name=ipa-server     state=installed
  - yum: name=ipa-server-dns state=installed

  - template: src=files/hosts.j2 dest=/etc/hosts

  - firewalld: port={{item}} state=enabled permanent=true
    notify: reload firewalld
    with_items:
    - 80/tcp
    - 443/tcp
    - 389/tcp
    - 636/tcp
    - 88/tcp
    - 464/tcp
    - 53/tcp
    - 88/udp
    - 464/udp
    - 53/udp
    - 123/udp

  - name: setup ipa
    command: ipa-server-install --unattended --ds-password={{ipa_install_directory_password}} --admin-password={{ipa_install_admin_password}} --domain={{domain}} --realm={{realm}} --hostname=ipa.{{domain}} --no-host-dns --setup-dns --auto-reverse --forwarder=8.8.8.8 --no-dnssec-validation
    args:
      creates: /etc/ipa/ca.crt