disable rpcbind by default

defaults/main.yml

@@ -31,3 +31,4 @@ railgun:
   remoteGatewayId: 31
 laptop: false
 extra_params: []
+nfs: false

tasks/apt.yml

@@ -8,6 +8,18 @@
   apt:
     # update_cache: true
     name: curl,wget,git,vim,sudo,byobu,iftop,iotop,build-essential,p7zip-full,p7zip-rar,xclip,astyle,tcpdump,rsync,htop,locales,mtr,dnsutils,net-tools,traceroute,tar,unzip,iperf,iperf3,nmap,mosh,subversion,nfs-common,fish,haveged,iptables,ipset,iproute2,python3-setuptools,python3-dev,python3-pip,wireguard-tools,zstd,gnupg2
+- name: disable rpcbind
+  become: true
+  systemd:
+    name: '{{ item }}'
+    state: stopped
+    enabled: false
+  ignore_errors: true
+  when: not nfs
+  with_items:
+    - rpcbind
+    - rpcbind.socket
+    - rpcbind.service
 - name: ctags in old Ubuntu
   become: true
   apt: