---
- name: Append vim configurations to vimrc
  ansible.builtin.blockinfile:
    path: "{{ '/mnt/etc/vim/vimrc' if is_debian | bool else '/mnt/etc/vimrc' }}"
    block: |
      set encoding=utf-8
      set number
      set autoindent
      set smartindent
      set mouse=a
    insertafter: EOF
    marker: ""
  failed_when: false

- name: Add memory tuning parameters
  ansible.builtin.blockinfile:
    path: /mnt/etc/sysctl.d/90-memory.conf
    create: true
    block: |
      vm.swappiness=10
      vm.vfs_cache_pressure=50
      vm.dirty_background_ratio=1
      vm.dirty_ratio=10
      vm.page-cluster=10
    marker: ""
    mode: "0644"

- name: Create zram config
  when: os | lower not in ['debian11', 'rhel8']
  ansible.builtin.copy:
    dest: /mnt/etc/systemd/zram-generator.conf
    content: |
      [zram0]
      zram-size  = ram / 2
      compression-algorithm = {{ 'zstd' if zstd_enabled | bool else 'lz4' }}
      swap-priority = 100
      fs-type = swap
    mode: "0644"

- name: Copy Custom Shell config
  ansible.builtin.template:
    src: custom.sh.j2
    dest: /mnt/etc/profile.d/custom.sh
    mode: "0644"

- name: Create login banner
  ansible.builtin.copy:
    dest: "{{ item }}"
    content: |
      **************************************************************
      * WARNING: Unauthorized access to this system is prohibited. *
      * All activities are monitored and logged.                   *
      * Disconnect immediately if you are not an authorized user.  *
      **************************************************************
    owner: root
    group: root
    mode: "0644"
  loop:
    - /mnt/etc/issue
    - /mnt/etc/issue.net

- name: Remove motd files
  when: os | lower in ["rhel8", "rhel9", "rhel10"]
  ansible.builtin.file:
    path: "{{ item }}"
    state: absent
  loop:
    - /mnt/etc/motd.d/cockpit
    - /mnt/etc/motd.d/insights-client