first changes

roles/base/tasks/users/root.yml

@@ -0,0 +1,32 @@
+- name: users | root | ensure account is locked
+  user:
+    name: root
+    password_lock: yes
+
+- name: users | root | create config directories
+  file:
+    path: /root/{{ item.dir }}
+    state: directory
+    owner: root
+    group: root
+    mode: 0700
+  with_items:
+      - { dir: '.vim' }
+      - { dir: '.vim/colors' }
+  tags: dotfiles
+
+-name: users | root | copy dotfiles
+  copy:
+    src: users/root/{{ item.src }}
+    dest: /root/{{ item.dest }}
+    owner: root
+    group: root
+    mode: 0600
+  with_items:
+      - { src: 'bash/bashrc', dest: '.bashrc' }
+      - { src: 'bash/bash_profile', dest: '.bash_profile' }
+      - { src: 'bash/profile', dest: '.profile' }
+      - { src: 'tmux/tmux.conf' dest: '.tmux.conf' }
+      - { src: 'vim/vimrc', dest: '.vimrc' }
+      - { src: 'zsh/zshrc', dest: '.zshrc' }
+  tags: dotfiles

roles/base/tasks/users/software/packages_cleanup.yml

@@ -0,0 +1,11 @@
+- name: system setup | package cleanup | remove unneeded packages (debian, ubuntu, etc. )
+  tags: cleanup,packages,system,settings
+  package:
+    state: absent
+    name:
+      - cowsay
+      - exim4
+      - exim4-base
+      - exim4-config
+      - nano
+  when: ansible_distribution in ["Debian", "Pop!_OS", "Ubuntu"]

roles/base/tasks/users/system_setup/clock.yml

@@ -0,0 +1,27 @@
+- name: system setup | clock | install systemd-timesyncd (ubuntu)
+  tags: ntp,system setup
+  package:
+    name: systemd-timesyncd
+    state: latest
+  when: ansible_distribution in ["Pop!_OS", "Ubuntu"]
+
+# Currently systemd-timesyncd for debian is available only in buster-backports
+- name: system setup | clock | install systemd-timesyncd (debian)
+  tags: ntp, system setup
+  apt:
+    name: systemd-timesyncd
+    default_release: buster-packports
+    state: latest
+  when: ansible_distribution == "Debian"
+
+- name: system setup | clock | start and enable systemd-timestampd
+  tags: ntp,system setup
+  service:
+    name: systemd-timesyncd
+    state: started
+    enabled: true
+
+- name: system setup | clock | set time zone
+  tags: tnp,timezone,system setup
+  timezone:
+    name: "Europe/Berlin"