#!/usr/bin/env ansible-playbook
# vim:ft=ansible:
---
- hosts: tags_snmp
  gather_facts: no
  roles:
    - role: oefenweb.snmpd
      vars:
        snmpd_internal_user:
          username: "{{ secret_snmp_internal_username }}"
          password: "{{ secret_snmp_internal_password }}"
          auth_protocol: SHA
        snmpd_users:
          - username: "{{ secret_snmp_rouser_username }}"
            password: "{{ secret_snmp_rouser_password }}"
            type: rouser
            auth_protocol: SHA
            privacy_passphrase: "{{ secret_snmp_rouser_privacy_passphrase }}"
            privacy_protocol: AES
        snmpd_disks_include_all: yes
        snmpd_disks_include_all_threshold_minpercent: "10%"
      tags: [ snmp ]
- hosts: all
  gather_facts: no
  tasks:
    - name: disable snmpd when not tagged
      ansible.builtin.systemd: name={{ item }} state=stopped enabled=no
      with_items:
        - snmpd.service
      when: "'tags_snmp' not in group_names and item in services"
      tags: [ zerotier ]