First draft generated by LLM

tasks/install.yml

@@ -0,0 +1,47 @@
+---
+- name: Install required packages
+  apt:
+    name:
+      - samba
+      - krb5-config
+      - krb5-user
+      - winbind
+      - smbclient
+      - dnsutils
+    state: present
+    update_cache: yes
+
+- name: Stop samba-ad-dc before provisioning (if running)
+  service:
+    name: samba-ad-dc
+    state: stopped
+    enabled: no
+  ignore_errors: yes
+
+- name: Provision AD domain
+  include_tasks: provision.yml
+
+- name: Deploy smb.conf
+  template:
+    src: smb.conf.j2
+    dest: "{{ samba_conf_path }}"
+    owner: root
+    group: root
+    mode: '0644'
+  notify: Restart Samba AD DC
+
+- name: Enable and start samba-ad-dc service
+  service:
+    name: samba-ad-dc
+    state: started
+    enabled: yes
+
+- name: Configure Kerberos
+  include_tasks: kerberos.yml
+
+- name: Set DNS resolver and hosts entry
+  include_tasks: dns_hosts.yml
+
+- name: Run verification checks
+  include_tasks: verify.yml
+  when: samba_verify | bool