---
- name: Set timezone {{ timezone }}
  template: src=etc/timezone dest=/etc/timezone
  notify:
    - update timezone
- name: Generate locale
  locale_gen: name={{ locale }}
- name: Set system locale
  command: update-locale LANG={{ locale }}
- name: Install base packages
  apt: pkg={{ item }} state=present update_cache=yes cache_valid_time=3600
  with_items:
    - ca-certificates
    - openntpd
    - ufw
  tags: [packages]
- name: Stop installing recommends
  copy: src=etc/apt/apt.conf.d/99recommends dest=/etc/apt/apt.conf.d/99recommends
- name: Allow ssh access
  ufw: rule=allow name=OpenSSH
  tags: [ufw]
- name: Enable ufw
  ufw: state=enabled
  tags: [ufw]
...