# We could probably avoid rebooting in some cases, but those should never happen
# in normal operation anyway. This way all setup is done before rebooting once.

- name: Set up management interfaces
  template:
    dest: /etc/network/interfaces.d/mgmt.intf
    src: mgmt.intf.j2
    mode: 0644
  notify: reboot

- name: Configure SSH instance in management VRF
  copy:
    dest: /etc/ssh/
    src: sshd_config.mgmt
    mode: 0644
  notify: reboot

- name: Set up a SSH instance in management VRF
  copy:
    dest: /etc/systemd/system/
    src: sshd@mgmt.service
    mode: 0644
  notify: reboot

- name: Enable management SSH
  service:
    name: sshd@mgmt
    enabled: yes
  notify: reboot

- meta: flush_handlers