---
bootstrap_rhel_base:
  - bind-utils
  - dhcp-client
  - efibootmgr
  - "{{ 'firewalld' if firewall_backend == 'firewalld' and firewall_enabled | bool else '' }}"
  - "{{ 'ufw' if firewall_backend == 'ufw' and firewall_enabled | bool else '' }}"
  - "{{ 'iptables' if firewall_toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if firewall_toolkit == 'nftables' else '' }}"
  - glibc-langpack-de
  - glibc-langpack-en
  - lrzsz
  - lvm2
  - mtr
  - ncurses-term
  - nfs-utils
  - policycoreutils-python-utils
  - shim
  - tmux
  - "{{ 'cryptsetup' if luks_enabled else '' }}"
  - "{{ 'tpm2-tools' if luks_enabled else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor | lower in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor | lower == 'vmware' else '' }}"
  - vim
  - zram-generator
  - zstd

bootstrap_rhel_versioned:
  - grub2
  - "{{ 'grub2-efi-x64' if os_version_major | default('') == '8' else 'grub2-efi' }}"
  - "{{ 'grub2-tools-extra' if os_version_major | default('') in ['8', '9'] else '' }}"
  - "{{ 'python39' if os_version_major | default('') == '8' else 'python' }}"
  - "{{ 'kernel' if os_version_major | default('') == '10' else '' }}"

bootstrap_rhel_common: "{{ bootstrap_rhel_base + bootstrap_rhel_versioned }}"

bootstrap_rhel8: "{{ bootstrap_rhel_common }}"
bootstrap_rhel9: "{{ bootstrap_rhel_common }}"
bootstrap_rhel10: "{{ bootstrap_rhel_common }}"

bootstrap_almalinux:
  "{{ bootstrap_rhel_base + ['grub2', 'grub2-efi', 'dbus-daemon', 'lrzsz', 'nfsv4-client-utils', 'nc', 'ppp'] }}"

bootstrap_rocky:
  "{{ bootstrap_rhel_base + ['grub2', 'grub2-efi', 'nfsv4-client-utils', 'nc', 'ppp', 'telnet', 'util-linux-core', 'wget'] }}"

bootstrap_almalinux8: "{{ bootstrap_almalinux }}"
bootstrap_almalinux9: "{{ bootstrap_almalinux }}"
bootstrap_almalinux10: "{{ bootstrap_almalinux }}"

bootstrap_rocky8: "{{ bootstrap_rocky }}"
bootstrap_rocky9: "{{ bootstrap_rocky }}"
bootstrap_rocky10: "{{ bootstrap_rocky }}"

bootstrap_fedora:
  - bat
  - bind-utils
  - btrfs-progs
  - cronie
  - dhcp-client
  - duf
  - efibootmgr
  - entr
  - "{{ 'firewalld' if firewall_backend == 'firewalld' and firewall_enabled | bool else '' }}"
  - "{{ 'ufw' if firewall_backend == 'ufw' and firewall_enabled | bool else '' }}"
  - "{{ 'iptables' if firewall_toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if firewall_toolkit == 'nftables' else '' }}"
  - fish
  - fzf
  - glibc-langpack-de
  - glibc-langpack-en
  - grub2
  - grub2-efi
  - htop
  - iperf3
  - logrotate
  - lrzsz
  - lvm2
  - nc
  - nfs-utils
  - nfsv4-client-utils
  - polkit
  - ppp
  - ripgrep
  - shim
  - tmux
  - "{{ 'cryptsetup' if luks_enabled else '' }}"
  - "{{ 'tpm2-tools' if luks_enabled else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor | lower in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor | lower == 'vmware' else '' }}"
  - vim-default-editor
  - wget
  - zoxide
  - zram-generator
  - zstd

bootstrap_fedora40: "{{ bootstrap_fedora }}"
bootstrap_fedora41: "{{ bootstrap_fedora }}"
bootstrap_fedora42: "{{ bootstrap_fedora }}"
bootstrap_fedora43: "{{ bootstrap_fedora }}"

bootstrap_debian_base:
  - btrfs-progs
  - cron
  - gnupg
  - grub-efi
  - grub-efi-amd64-signed
  - grub2-common
  - "{{ 'cryptsetup' if luks_enabled else '' }}"
  - "{{ 'cryptsetup-initramfs' if luks_enabled else '' }}"
  - locales
  - logrotate
  - lvm2
  - "{{ 'iptables' if firewall_toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if firewall_toolkit == 'nftables' else '' }}"
  - "{{ 'openssh-server' if ssh_enabled | bool else '' }}"
  - python3
  - xfsprogs

bootstrap_debian_extra:
  - apparmor-utils
  - bat
  - chrony
  - curl
  - duf
  - entr
  - "{{ 'firewalld' if firewall_backend == 'firewalld' and firewall_enabled | bool else '' }}"
  - "{{ 'ufw' if firewall_backend == 'ufw' and firewall_enabled | bool else '' }}"
  - fish
  - fzf
  - htop
  - jq
  - libpam-pwquality
  - lrzsz
  - mtr
  - ncdu
  - net-tools
  - network-manager
  - python-is-python3
  - ripgrep
  - rsync
  - screen
  - software-properties-common
  - sudo
  - syslog-ng
  - systemd-zram-generator
  - tcpd
  - tldr
  - "{{ 'tpm2-tools' if luks_enabled else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor | lower in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor | lower == 'vmware' else '' }}"
  - vim
  - wget
  - zstd

bootstrap_debian_versioned:
  - "{{ 'linux-image-amd64' if (os_version | string) in ['10', '11', '13', 'unstable'] else '' }}"
  - "{{ 'fastfetch' if (os_version | string) in ['12', '13', 'unstable'] else '' }}"
  - "{{ 'neofetch' if (os_version | string) == '12' else '' }}"

bootstrap_debian_common: "{{ bootstrap_debian_base + bootstrap_debian_extra + bootstrap_debian_versioned }}"

bootstrap_debian10: "{{ bootstrap_debian_common }}"
bootstrap_debian11: "{{ bootstrap_debian_common }}"
bootstrap_debian12: "{{ bootstrap_debian_common }}"
bootstrap_debian13: "{{ bootstrap_debian_common }}"
bootstrap_debianunstable: "{{ bootstrap_debian_common }}"

bootstrap_ubuntu:
  "{{
    bootstrap_debian_base + bootstrap_debian_extra +
    ['bash-completion', 'dnsutils', 'eza', 'fdupes', 'fio', 'ncurses-term', 'traceroute', 'util-linux-extra', 'yq', 'zoxide']
  }}"

bootstrap_ubuntu_lts:
  "{{
    bootstrap_debian_base + bootstrap_debian_extra +
    ['bash-completion', 'dnsutils', 'eza', 'fdupes', 'fio', 'ncurses-term', 'traceroute', 'util-linux-extra', 'yq', 'zoxide']
  }}"

bootstrap_archlinux:
  - base
  - btrfs-progs
  - cronie
  - dhcpcd
  - efibootmgr
  - fastfetch
  - "{{ 'firewalld' if firewall_backend == 'firewalld' and firewall_enabled | bool else '' }}"
  - "{{ 'ufw' if firewall_backend == 'ufw' and firewall_enabled | bool else '' }}"
  - "{{ 'iptables' if firewall_toolkit == 'iptables' else '' }}"
  - "{{ 'iptables-nft' if firewall_toolkit == 'nftables' else '' }}"
  - fish
  - fzf
  - grub
  - htop
  - libpwquality
  - linux
  - logrotate
  - lrzsz
  - lsof
  - lvm2
  - ncdu
  - networkmanager
  - nfs-utils
  - "{{ 'openssh' if ssh_enabled | bool else '' }}"
  - ppp
  - prometheus-node-exporter
  - python-psycopg2
  - reflector
  - rsync
  - sudo
  - tldr
  - tmux
  - "{{ 'cryptsetup' if luks_enabled else '' }}"
  - "{{ 'tpm2-tools' if luks_enabled else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor | lower in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor | lower == 'vmware' else '' }}"
  - vim
  - wireguard-tools
  - zram-generator

bootstrap_alpine:
  - alpine-base
  - vim
  - "{{ 'openssh' if ssh_enabled | bool else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor | lower in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor | lower == 'vmware' else '' }}"
  - "{{ 'firewalld' if firewall_backend == 'firewalld' and firewall_enabled | bool else '' }}"
  - "{{ 'ufw' if firewall_backend == 'ufw' and firewall_enabled | bool else '' }}"
  - "{{ 'iptables' if firewall_toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if firewall_toolkit == 'nftables' else '' }}"
  - "{{ 'cryptsetup' if luks_enabled else '' }}"
  - "{{ 'tpm2-tools' if luks_enabled else '' }}"

bootstrap_opensuse:
  - vim
  - "{{ 'openssh' if ssh_enabled | bool else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor | lower in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor | lower == 'vmware' else '' }}"
  - "{{ 'firewalld' if firewall_backend == 'firewalld' and firewall_enabled | bool else '' }}"
  - "{{ 'ufw' if firewall_backend == 'ufw' and firewall_enabled | bool else '' }}"
  - "{{ 'iptables' if firewall_toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if firewall_toolkit == 'nftables' else '' }}"
  - "{{ 'cryptsetup' if luks_enabled else '' }}"
  - "{{ 'tpm2-tools' if luks_enabled else '' }}"

bootstrap_void:
  - vim
  - "{{ 'openssh' if ssh_enabled | bool else '' }}"
  - "{{ 'qemu-guest-agent' if hypervisor | lower in ['libvirt', 'proxmox'] else '' }}"
  - "{{ 'open-vm-tools' if hypervisor | lower == 'vmware' else '' }}"
  - "{{ 'firewalld' if firewall_backend == 'firewalld' and firewall_enabled | bool else '' }}"
  - "{{ 'ufw' if firewall_backend == 'ufw' and firewall_enabled | bool else '' }}"
  - "{{ 'iptables' if firewall_toolkit == 'iptables' else '' }}"
  - "{{ 'nftables' if firewall_toolkit == 'nftables' else '' }}"
  - "{{ 'cryptsetup' if luks_enabled else '' }}"
  - "{{ 'tpm2-tools' if luks_enabled else '' }}"