- name: copy firewall template
  become: true
  template:
    src: 'templates/nftables.j2'
    dest: '/etc/nftables.conf'
    owner: root
    group: root
    mode: '0644'
  notify: restart nftables

- name: copy ssh template
  become: true
  template:
    src: 'templates/ssh.j2'
    dest: '/etc/ssh/sshd_config'
    owner: root
    group: root
    mode: '0644'
  notify: reload ssh

# TODO: provision default grub menu entry for now
# linux-image-6.1.0-17 kernel seems to break networking