---

- name: Разворачивание контроллера домена
  hosts: dctest2

  tasks:
  - name: Внесение изменений в /etc/krb5.conf - "default_realm = {{ dc_details.realm }}"
    ansible.builtin.lineinfile:
      path: /etc/krb5.conf
      regexp: 'default_realm'
      line: " default_realm = {{ dc_details.realm }}"
  
  - name: Внесение изменений в /etc/krb5.conf - "dns_lookup_realm = false"
    ansible.builtin.lineinfile:
      path: /etc/krb5.conf
      regexp: 'dns_lookup_realm'
      line: " dns_lookup_realm = false"

  - name: Внесение изменений в /etc/krb5.conf - "dns_lookup_kdc = true"
    ansible.builtin.lineinfile:
      path: /etc/krb5.conf
      regexp: 'dns_lookup_kdc'
      line: " dns_lookup_kdc = true"

####

- name: Конфигурация NTP
  ansible.builtin.command:
    cmd: control chrony server

- name: Включение NTP (режим server)
  service:
    name: chronyd
    state: started
    enabled: true