---
- name: Refresh the apt cache (once per hour at most)
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600

- name: Install baseline packages
  ansible.builtin.apt:
    name: "{{ linux_baseline_packages }}"
    state: present

- name: Remove packages that should not be present on a server baseline
  ansible.builtin.apt:
    name: "{{ linux_baseline_packages_absent }}"
    state: absent
    purge: true
  when: linux_baseline_packages_absent | length > 0