---
- name: Set timezone {{ timezone }}
  template:
    src: etc/timezone
    dest: /etc/timezone
  notify:
    - update timezone
- name: Generate locale
  locale_gen:
    name: '{{ locale }}'
- name: Set system locale
  command: update-locale LANG={{ locale }}
- name: Install base packages
  apt:
    update_cache: yes
    cache_valid_time: 3600
    pkg: '{{ item }}'
    state: present
  with_items:
    - ca-certificates
    - openntpd
    - ufw
  tags: [packages]
- name: Don't install recommends
  copy:
    src: etc/apt/apt.conf.d/99recommends
    dest: /etc/apt/apt.conf.d/99recommends
- name: Allow ssh access
  ufw:
    rule: allow
    name: OpenSSH
  tags: [ufw]
- name: Enable ufw
  ufw:
    state: enabled
  tags: [ufw]
...