---
bootstrap_rhel_base:
  - bind-utils
  - dhcp-client
  - efibootmgr
  - "{{ 'firewalld' if system_cfg.features.firewall.backend == 'firewalld' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'ufw' if system_cfg.features.firewall.backend == 'ufw' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'iptables' if system_cfg.features.firewall.toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if system_cfg.features.firewall.toolkit == 'nftables' else '' }}"
  - glibc-langpack-de
  - glibc-langpack-en
  - lrzsz
  - lvm2
  - mtr
  - ncurses-term
  - nfs-utils
  - policycoreutils-python-utils
  - shim
  - tmux
  - "{{ 'cryptsetup' if system_cfg.luks.enabled else '' }}"
  - "{{ 'tpm2-tools' if system_cfg.luks.enabled else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor_type in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor_type == 'vmware' else '' }}"
  - vim
  - zstd

bootstrap_rhel_versioned:
  - grub2
  - "{{ 'grub2-efi-x64' if os_version_major | default('') == '8' else 'grub2-efi' }}"
  - "{{ 'grub2-tools-extra' if os_version_major | default('') in ['8', '9'] else '' }}"
  - "{{ 'python39' if os_version_major | default('') == '8' else 'python' }}"
  - "{{ 'kernel' if os_version_major | default('') == '10' else '' }}"
  - "{{ 'zram-generator' if os_version_major | default('') in ['9', '10'] else '' }}"

bootstrap_rhel_common: "{{ bootstrap_rhel_base + bootstrap_rhel_versioned }}"

bootstrap_rhel8: "{{ bootstrap_rhel_common }}"
bootstrap_rhel9: "{{ bootstrap_rhel_common }}"
bootstrap_rhel10: "{{ bootstrap_rhel_common }}"

bootstrap_almalinux:
  "{{ bootstrap_rhel_base + ['grub2', 'grub2-efi', 'dbus-daemon', 'lrzsz', 'nfsv4-client-utils', 'nc', 'ppp', 'zram-generator'] }}"

bootstrap_rocky:
  "{{ bootstrap_rhel_base + ['grub2', 'grub2-efi', 'nfsv4-client-utils', 'nc', 'ppp', 'telnet', 'util-linux-core', 'wget', 'zram-generator'] }}"

bootstrap_almalinux8: "{{ bootstrap_almalinux }}"
bootstrap_almalinux9: "{{ bootstrap_almalinux }}"
bootstrap_almalinux10: "{{ bootstrap_almalinux }}"

bootstrap_rocky8: "{{ bootstrap_rocky }}"
bootstrap_rocky9: "{{ bootstrap_rocky }}"
bootstrap_rocky10: "{{ bootstrap_rocky }}"

bootstrap_fedora:
  - bat
  - bind-utils
  - btrfs-progs
  - cronie
  - dhcp-client
  - duf
  - efibootmgr
  - entr
  - "{{ 'firewalld' if system_cfg.features.firewall.backend == 'firewalld' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'ufw' if system_cfg.features.firewall.backend == 'ufw' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'iptables' if system_cfg.features.firewall.toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if system_cfg.features.firewall.toolkit == 'nftables' else '' }}"
  - fish
  - fzf
  - glibc-langpack-de
  - glibc-langpack-en
  - grub2
  - grub2-efi
  - htop
  - iperf3
  - logrotate
  - lrzsz
  - lvm2
  - nc
  - nfs-utils
  - nfsv4-client-utils
  - polkit
  - ppp
  - ripgrep
  - shim
  - tmux
  - "{{ 'cryptsetup' if system_cfg.luks.enabled else '' }}"
  - "{{ 'tpm2-tools' if system_cfg.luks.enabled else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor_type in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor_type == 'vmware' else '' }}"
  - vim-default-editor
  - wget
  - zoxide
  - zram-generator
  - zstd

bootstrap_fedora40: "{{ bootstrap_fedora }}"
bootstrap_fedora41: "{{ bootstrap_fedora }}"
bootstrap_fedora42: "{{ bootstrap_fedora }}"
bootstrap_fedora43: "{{ bootstrap_fedora }}"

bootstrap_debian_base_common:
  - btrfs-progs
  - cron
  - gnupg
  - grub-efi
  - grub-efi-amd64-signed
  - grub2-common
  - "{{ 'cryptsetup' if system_cfg.luks.enabled else '' }}"
  - "{{ 'cryptsetup-initramfs' if system_cfg.luks.enabled else '' }}"
  - locales
  - logrotate
  - lvm2
  - "{{ 'iptables' if system_cfg.features.firewall.toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if system_cfg.features.firewall.toolkit == 'nftables' else '' }}"
  - "{{ 'openssh-server' if system_cfg.features.ssh.enabled | bool else '' }}"
  - python3
  - xfsprogs

bootstrap_debian_extra_common:
  - apparmor-utils
  - bat
  - chrony
  - curl
  - entr
  - "{{ 'firewalld' if system_cfg.features.firewall.backend == 'firewalld' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'ufw' if system_cfg.features.firewall.backend == 'ufw' and system_cfg.features.firewall.enabled | bool else '' }}"
  - fish
  - fzf
  - htop
  - jq
  - libpam-pwquality
  - lrzsz
  - mtr
  - ncdu
  - net-tools
  - network-manager
  - python-is-python3
  - ripgrep
  - rsync
  - screen
  - sudo
  - syslog-ng
  - tcpd
  - "{{ 'tpm2-tools' if system_cfg.luks.enabled else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor_type in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor_type == 'vmware' else '' }}"
  - vim
  - wget
  - zstd

bootstrap_debian_extra_versioned:
  - linux-image-amd64
  - "{{ 'duf' if (os_version | string) not in ['10', '11'] else '' }}"
  - "{{ 'fastfetch' if (os_version | string) in ['12', '13', 'unstable'] else '' }}"
  - "{{ 'neofetch' if (os_version | string) == '12' else '' }}"
  - "{{ 'software-properties-common' if (os_version | string) not in ['13', 'unstable'] else '' }}"
  - "{{ 'systemd-zram-generator' if (os_version | string) not in ['10', '11'] else '' }}"
  - "{{ 'tldr' if (os_version | string) not in ['13', 'unstable'] else '' }}"

bootstrap_debian:
  base: "{{ bootstrap_debian_base_common }}"
  extra: "{{ bootstrap_debian_extra_common + bootstrap_debian_extra_versioned }}"

bootstrap_debian10: "{{ bootstrap_debian }}"
bootstrap_debian11: "{{ bootstrap_debian }}"
bootstrap_debian12: "{{ bootstrap_debian }}"
bootstrap_debian13: "{{ bootstrap_debian }}"
bootstrap_debianunstable: "{{ bootstrap_debian }}"

bootstrap_ubuntu:
  base:
    - linux-image-generic
  extra: >-
    {{
      bootstrap_debian_base_common
      + bootstrap_debian_extra_common
      + ['bash-completion', 'dnsutils', 'duf', 'eza', 'fdupes', 'fio', 'ncurses-term', 'software-properties-common', 'systemd-zram-generator', 'tldr', 'traceroute', 'util-linux-extra', 'yq', 'zoxide']
    }}

bootstrap_ubuntu_lts:
  base:
    - linux-image-generic
  extra: >-
    {{
      bootstrap_debian_base_common
      + bootstrap_debian_extra_common
      + ['bash-completion', 'dnsutils', 'duf', 'eza', 'fdupes', 'fio', 'ncurses-term', 'software-properties-common', 'systemd-zram-generator', 'tldr', 'traceroute', 'util-linux-extra', 'yq', 'zoxide']
    }}

bootstrap_archlinux:
  - base
  - btrfs-progs
  - cronie
  - dhcpcd
  - efibootmgr
  - fastfetch
  - "{{ 'firewalld' if system_cfg.features.firewall.backend == 'firewalld' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'ufw' if system_cfg.features.firewall.backend == 'ufw' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'iptables' if system_cfg.features.firewall.toolkit == 'iptables' else '' }}"
  - "{{ 'iptables-nft' if system_cfg.features.firewall.toolkit == 'nftables' else '' }}"
  - fish
  - fzf
  - grub
  - htop
  - libpwquality
  - linux
  - logrotate
  - lrzsz
  - lsof
  - lvm2
  - ncdu
  - networkmanager
  - nfs-utils
  - "{{ 'openssh' if system_cfg.features.ssh.enabled | bool else '' }}"
  - ppp
  - prometheus-node-exporter
  - python-psycopg2
  - reflector
  - rsync
  - sudo
  - tldr
  - tmux
  - "{{ 'cryptsetup' if system_cfg.luks.enabled else '' }}"
  - "{{ 'tpm2-tools' if system_cfg.luks.enabled else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor_type in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor_type == 'vmware' else '' }}"
  - vim
  - wireguard-tools
  - zram-generator

bootstrap_alpine:
  - alpine-base
  - vim
  - "{{ 'openssh' if system_cfg.features.ssh.enabled | bool else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor_type in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor_type == 'vmware' else '' }}"
  - "{{ 'firewalld' if system_cfg.features.firewall.backend == 'firewalld' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'ufw' if system_cfg.features.firewall.backend == 'ufw' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'iptables' if system_cfg.features.firewall.toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if system_cfg.features.firewall.toolkit == 'nftables' else '' }}"
  - "{{ 'cryptsetup' if system_cfg.luks.enabled else '' }}"
  - "{{ 'tpm2-tools' if system_cfg.luks.enabled else '' }}"

bootstrap_opensuse:
  - vim
  - "{{ 'openssh' if system_cfg.features.ssh.enabled | bool else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor_type in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor_type == 'vmware' else '' }}"
  - "{{ 'firewalld' if system_cfg.features.firewall.backend == 'firewalld' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'ufw' if system_cfg.features.firewall.backend == 'ufw' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'iptables' if system_cfg.features.firewall.toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if system_cfg.features.firewall.toolkit == 'nftables' else '' }}"
  - "{{ 'cryptsetup' if system_cfg.luks.enabled else '' }}"
  - "{{ 'tpm2-tools' if system_cfg.luks.enabled else '' }}"

bootstrap_void:
  - vim
  - "{{ 'openssh' if system_cfg.features.ssh.enabled | bool else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor_type in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor_type == 'vmware' else '' }}"
  - "{{ 'firewalld' if system_cfg.features.firewall.backend == 'firewalld' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'ufw' if system_cfg.features.firewall.backend == 'ufw' and system_cfg.features.firewall.enabled | bool else '' }}"
  - "{{ 'iptables' if system_cfg.features.firewall.toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if system_cfg.features.firewall.toolkit == 'nftables' else '' }}"
  - "{{ 'cryptsetup' if system_cfg.luks.enabled else '' }}"
  - "{{ 'tpm2-tools' if system_cfg.luks.enabled else '' }}"