- name: setup server
  hosts: all
  tasks:
    - name: ping all
      ansible.builtin.ping:
    - name: install base pkgs
    - name: install tailscale repo
      when: #tailscale not in distro
    - name: authenticate with tailscale
    - name: start mosh
    - name: harden ssh
    - name: setup firewall
    - name: create a services user
    - name: clone repo to services directory