---
- name: Installation de sshguard, ufw
  apt:
    name:
      - sshguard
      - ufw
    update_cache: true
    state: present

- name: Mise en place des règle firewall tcp et udp
  #source : https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart#setup-and-configure-your-firewall
  ufw:
    state: enabled
    rule: allow
    port: '{{ item[0] }}'
    proto: '{{ item[1] }}'
  loop:
      - ['80','tcp']
      - ['443','tcp']
      - ['4443','tcp']
      - ['22','tcp']
      - ['10000','udp']
      - ['3478','tcp']
      - ['5349','udp']
      - ['5222','tcp'] # XMPP port for recorder

- name: Ajout de la clé GPG pour le depot jitsi
  apt_key:
    url: http://download.jitsi.org/jitsi-key.gpg.key

- name: Ajout du depot jitsi
  apt_repository:
    repo: deb https://download.jitsi.org stable/

- name: apt update
  apt:
    update_cache: true

- name: Application du hostname avant installation
  debconf:
    name: jitsi-meet-web-config
    question: jitsi-videobridge/jvb-hostname
    value: '{{ inventory_hostname }}'
    vtype: string

- name: On veut un certificat autogénéré
  debconf:
    name: jitsi-meet-web-config
    question: jitsi-meet/cert-choice
    value: "Generate a new self-signed certificate (You will later get a chance to obtain a Let's encrypt certificate)"
    vtype: string