os/config/cluster_nodes.yml

@@ -1,6 +1,8 @@
 ---
  
 - hosts: cluster_nodes
+  # "you can define how many hosts Ansible should manage at a single time 
+  # using the serial keyword"
   serial: 1
   roles:
     - role: common

os/config/roles/common/tasks/main.yml

@@ -15,30 +15,35 @@
 - name: "Install base tools"
   apt:
     name:
-      - vim
-      - htop
-      - screen
-      - iptables
-      - iptables-persistent
-      - nftables
-      - iproute2
+      # Essentials
       - curl
-      - iputils-ping
-      - dnsutils
-      - bmon
-      - iftop
-      - iotop
-      - docker.io
-      - unzip
-      - tar
-      - tcpdump
       - less
-      - parted
-      - btrfs-tools
-      - libnss-resolve
-      - net-tools
-      - strace
       - sudo
+      - tar
+      - unzip
+      # User tooling
+      - screen
+      - vim
+      # Monitoring
+      - bmon
+      - htop
+      - iftop
+      - iputils-ping
+      - iotop
+      - strace
+      - tcpdump
+      # Networking
+      - iproute2 # advanced net-tools
+      - iptables # legacy firewall (still used by diplonat)
+      - iptables-persistent
+      - net-tools # basic network tools
+      - nftables # iptables' successor (will replace it eventually)
+      - dnsutils # now called bind9-dnsutils
+      # Optional / Dispensable
+      #- docker.io # Adrien n'approuve pas (il faut utiliser le repo Docker)
+      - parted 
+      #- btrfs-tools
+      #- libnss-resolve # provides DNS/LLMNR utilities via systemd-resolved
     state: present
 
 - name: "Passwordless sudo"