---
- name: Provision the Samba AD DC
  ansible.builtin.command: >
    samba-tool domain provision
    --use-rfc2307
    --realm={{ addc_auth_domain }}
    --domain={{ addc_netbios_domain }}
    --server-role={{ addc_server_role }}
    --dns-backend={{ addc_dns_backend }}
    --adminpass={{ addc_admin_password }}
    --option="interfaces=lo eth0"
    --option="bind interfaces only=yes"
  register: samba_provision_output
  changed_when: samba_provision_output.rc == 0
  no_log: true  # You may toggle this if password should be hidden