---
- name: Allow admin user passwordless sudo for Ansible
  ansible.builtin.copy:
    dest: "/etc/sudoers.d/{{ admin_user }}"
    content: "{{ admin_user }} ALL=(ALL) NOPASSWD:ALL\n"
    mode: "0440"
    validate: visudo -cf %s

- name: Update apt cache
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600

- name: Install base packages
  ansible.builtin.apt:
    name:
      - git
      - python3
      - python3-pip
      - python3-venv
      - curl
      - ca-certificates
      - gnupg
      - apt-transport-https
      - software-properties-common
    state: present