---

- name: Install nfs server
  ansible.builtin.apt:
    name: nfs-kernel-server
    state: present
    update_cache: yes

- name: Create /srv/protected export
  ansible.builtin.file:
    state: directory
    path: /srv/protected

- name: Export /srv/protected
  ansible.builtin.lineinfile:
    path: /etc/exports
    regexp: '^/srv/protected'
    line: /srv/protected *(rw,sync,sec=krb5p,no_subtree_check) 

- name: Create /srv/vault export
  ansible.builtin.file:
    state: directory
    path: /srv/vault

- name: Export /srv/vault
  ansible.builtin.lineinfile:
    path: /etc/exports
    regexp: '^/srv/vault'
    line: /srv/vault *(rw,sync,sec=krb5p:krb5i:krb5,no_subtree_check)

- name: Enable and start NFS server
  ansible.builtin.service:
    name: nfs-kernel-server
    state: started
    enabled: yes