---
# Run: ansible-playbook -i ansible/inventory.yaml ansible/playbooks/bootstrap-minisforum.yaml
# Requires: SSH access to 192.168.7.7 as root (or a user with NOPASSWD sudo)
#
# What this does:
#   - Creates the 'nik' user with sudo access
#   - Hardens SSH (no password auth, no root login)
#   - Installs base packages
#   - Configures UFW firewall
#   - Creates /data/* directories for persistent volumes

- name: Bootstrap Minisforum
  hosts: minisforum
  become: true
  gather_facts: true

  roles:
    - common