Ran ansible-lint
This commit is contained in:
parent
92f761f4bb
commit
43d470edf3
33 changed files with 343 additions and 317 deletions
|
|
@ -1,12 +1,13 @@
|
|||
---
|
||||
- name: Create xdg-desktop-portal.service.d directory
|
||||
ansible.builtin.file:
|
||||
path: '{{ xdg_config_dir }}/systemd/user/xdg-desktop-portal.service.d'
|
||||
path: "{{ xdg_config_dir }}/systemd/user/xdg-desktop-portal.service.d"
|
||||
state: directory
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
|
||||
- name: Copy xdg-desktop-portal.service drop-in
|
||||
ansible.builtin.template:
|
||||
src: templates/desktop/xdg-desktop-portal.service.j2
|
||||
dest: '{{ xdg_config_dir }}/systemd/user/xdg-desktop-portal.service.d/override.conf'
|
||||
mode: '0755'
|
||||
dest: "{{ xdg_config_dir }}/systemd/user/xdg-desktop-portal.service.d/override.conf"
|
||||
mode: "0755"
|
||||
notify: user daemon-reload
|
||||
|
|
|
|||
|
|
@ -1,66 +1,67 @@
|
|||
---
|
||||
- name: Include mpd defaults
|
||||
ansible.builtin.include_vars:
|
||||
file: vars/mpd.yml
|
||||
|
||||
- name: Copy systemd configuration files
|
||||
ansible.builtin.template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
mode: '0644'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
mode: "0644"
|
||||
loop:
|
||||
- src: 'templates/mpd/service.j2'
|
||||
dest: '{{ xdg_config_dir }}/systemd/user/mpd.service'
|
||||
- src: "templates/mpd/service.j2"
|
||||
dest: "{{ xdg_config_dir }}/systemd/user/mpd.service"
|
||||
|
||||
- src: 'templates/mpd/socket.j2'
|
||||
dest: '{{ xdg_config_dir }}/systemd/user/mpd.socket'
|
||||
- src: "templates/mpd/socket.j2"
|
||||
dest: "{{ xdg_config_dir }}/systemd/user/mpd.socket"
|
||||
notify:
|
||||
- stop mpd service
|
||||
- restart mpd socket
|
||||
|
||||
- name: Create mpd files
|
||||
ansible.builtin.file:
|
||||
path: '{{ item.path }}'
|
||||
state: '{{ item.state }}'
|
||||
mode: '0755'
|
||||
path: "{{ item.path }}"
|
||||
state: "{{ item.state }}"
|
||||
mode: "0755"
|
||||
loop:
|
||||
- path: '{{ mpd_configuration_dir }}'
|
||||
state: 'directory'
|
||||
- path: '{{ ncmpc_configuration_dir }}'
|
||||
state: 'directory'
|
||||
- path: '{{ ncmpcpp_configuration_dir }}'
|
||||
state: 'directory'
|
||||
- path: '{{ mpd_configuration_dir }}/playlists'
|
||||
state: 'directory'
|
||||
- path: '{{ mpd_configuration_dir }}/state'
|
||||
state: 'touch'
|
||||
- path: "{{ mpd_configuration_dir }}"
|
||||
state: "directory"
|
||||
- path: "{{ ncmpc_configuration_dir }}"
|
||||
state: "directory"
|
||||
- path: "{{ ncmpcpp_configuration_dir }}"
|
||||
state: "directory"
|
||||
- path: "{{ mpd_configuration_dir }}/playlists"
|
||||
state: "directory"
|
||||
- path: "{{ mpd_configuration_dir }}/state"
|
||||
state: "touch"
|
||||
|
||||
- name: Remove previous mpd files
|
||||
ansible.builtin.file:
|
||||
path: '{{ item.path }}'
|
||||
state: '{{ item.state }}'
|
||||
mode: '0755'
|
||||
path: "{{ item.path }}"
|
||||
state: "{{ item.state }}"
|
||||
mode: "0755"
|
||||
loop:
|
||||
- path: '{{ mpd_configuration_dir }}/log'
|
||||
state: 'absent'
|
||||
- path: '{{ mpd_configuration_dir }}/database'
|
||||
state: 'absent'
|
||||
- path: '{{ mpd_configuration_dir }}/sticker.sql'
|
||||
state: 'absent'
|
||||
- path: '{{ ncmpc_configuration_dir }}'
|
||||
state: 'absent'
|
||||
- path: "{{ mpd_configuration_dir }}/log"
|
||||
state: "absent"
|
||||
- path: "{{ mpd_configuration_dir }}/database"
|
||||
state: "absent"
|
||||
- path: "{{ mpd_configuration_dir }}/sticker.sql"
|
||||
state: "absent"
|
||||
- path: "{{ ncmpc_configuration_dir }}"
|
||||
state: "absent"
|
||||
|
||||
- name: Copy configuration files
|
||||
ansible.builtin.template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
mode: '0755'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
mode: "0755"
|
||||
loop:
|
||||
- src: 'templates/mpd/mpd.conf.j2'
|
||||
dest: '{{ mpd_configuration_dir }}/mpd.conf'
|
||||
- src: 'templates/mpd/ncmpcpp/config.j2'
|
||||
dest: '{{ ncmpcpp_configuration_dir }}/config'
|
||||
- src: 'templates/mpd/ncmpcpp/bindings.j2'
|
||||
dest: '{{ ncmpcpp_configuration_dir }}/bindings'
|
||||
- src: "templates/mpd/mpd.conf.j2"
|
||||
dest: "{{ mpd_configuration_dir }}/mpd.conf"
|
||||
- src: "templates/mpd/ncmpcpp/config.j2"
|
||||
dest: "{{ ncmpcpp_configuration_dir }}/config"
|
||||
- src: "templates/mpd/ncmpcpp/bindings.j2"
|
||||
dest: "{{ ncmpcpp_configuration_dir }}/bindings"
|
||||
notify:
|
||||
- stop mpd service
|
||||
|
||||
|
|
|
|||
|
|
@ -1,16 +1,17 @@
|
|||
---
|
||||
- name: Create configuration directory
|
||||
ansible.builtin.file:
|
||||
path: '{{ ansible_env.HOME }}/.config/mpv'
|
||||
path: "{{ ansible_env.HOME }}/.config/mpv"
|
||||
state: directory
|
||||
mode: '0700'
|
||||
mode: "0700"
|
||||
|
||||
- name: Copy configuration files
|
||||
ansible.builtin.template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
mode: '0644'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
mode: "0644"
|
||||
loop:
|
||||
- src: 'templates/mpv/input.j2'
|
||||
dest: '{{ ansible_env.HOME }}/.config/mpv/input.conf'
|
||||
- src: 'templates/mpv/config.j2'
|
||||
dest: '{{ ansible_env.HOME }}/.config/mpv/mpv.conf'
|
||||
- src: "templates/mpv/input.j2"
|
||||
dest: "{{ ansible_env.HOME }}/.config/mpv/input.conf"
|
||||
- src: "templates/mpv/config.j2"
|
||||
dest: "{{ ansible_env.HOME }}/.config/mpv/mpv.conf"
|
||||
|
|
|
|||
|
|
@ -1,3 +1,4 @@
|
|||
---
|
||||
- name: Desktop configuration
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
|
|
@ -6,22 +7,22 @@
|
|||
- name: Setup network configuration
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0640'
|
||||
mode: "0640"
|
||||
loop:
|
||||
- src: 'templates/desktop/network/enp1s0.link.j2'
|
||||
dest: '/etc/systemd/network/20-enp1s0.link'
|
||||
- src: 'templates/desktop//network/enp1s0.network.j2'
|
||||
dest: '/etc/systemd/network/20-enp1s0.network'
|
||||
- src: "templates/desktop/network/enp1s0.link.j2"
|
||||
dest: "/etc/systemd/network/20-enp1s0.link"
|
||||
- src: "templates/desktop//network/enp1s0.network.j2"
|
||||
dest: "/etc/systemd/network/20-enp1s0.network"
|
||||
|
||||
- name: Remove leftover configuration files
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: '{{ item }}'
|
||||
path: "{{ item }}"
|
||||
state: absent
|
||||
loop:
|
||||
- '/etc/systemd/network/30-vmbr0.network'
|
||||
- '/etc/systemd/network/30-vmbr0.netdev'
|
||||
- "/etc/systemd/network/30-vmbr0.network"
|
||||
- "/etc/systemd/network/30-vmbr0.netdev"
|
||||
|
|
|
|||
|
|
@ -1,3 +1,4 @@
|
|||
---
|
||||
# Note that Wireguard does DNS resolution only once during connection.
|
||||
# When a client's IP changes, the server should be notified in some way,
|
||||
# using `wg set wg0 peer izHzmRwh2yzICps6pFI2Bg3TnmTD66/8uH4loJpkuD4= endpoint <NEW-IP>:<PORT>`
|
||||
|
|
@ -6,7 +7,7 @@
|
|||
- name: Set hostname
|
||||
become: true
|
||||
ansible.builtin.hostname:
|
||||
name: '{{ hostname }}'
|
||||
name: "{{ hostname }}"
|
||||
use: systemd
|
||||
|
||||
- name: Copy hosts file
|
||||
|
|
@ -14,15 +15,15 @@
|
|||
ansible.builtin.template:
|
||||
src: templates/hosts.j2
|
||||
dest: /etc/hosts
|
||||
mode: '0644'
|
||||
mode: "0644"
|
||||
owner: root
|
||||
|
||||
- name: Copy firewall template
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: 'templates/{{ ansible_hostname }}/nftables.j2'
|
||||
src: "templates/{{ ansible_hostname }}/nftables.j2"
|
||||
dest: /etc/nftables.conf
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0600'
|
||||
mode: "0600"
|
||||
notify: restart nftables
|
||||
|
|
|
|||
|
|
@ -1,20 +1,21 @@
|
|||
---
|
||||
- name: Setup network configuration
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0640'
|
||||
mode: "0640"
|
||||
loop:
|
||||
- src: 'templates/xps/network/wlan0-local.network.j2'
|
||||
dest: '/etc/systemd/network/10-wireless.network'
|
||||
- src: "templates/xps/network/wlan0-local.network.j2"
|
||||
dest: "/etc/systemd/network/10-wireless.network"
|
||||
|
||||
- src: 'templates/xps/network/wlan0-frans.network.j2'
|
||||
dest: '/etc/systemd/network/11-wireless.network'
|
||||
- src: "templates/xps/network/wlan0-frans.network.j2"
|
||||
dest: "/etc/systemd/network/11-wireless.network"
|
||||
|
||||
- src: 'templates/xps/network/wlan0.network.j2'
|
||||
dest: '/etc/systemd/network/20-wireless.network'
|
||||
- src: "templates/xps/network/wlan0.network.j2"
|
||||
dest: "/etc/systemd/network/20-wireless.network"
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
- restart systemd-resolved
|
||||
|
|
@ -24,7 +25,7 @@
|
|||
ansible.builtin.template:
|
||||
src: templates/xps/iwd.j2
|
||||
dest: /etc/iwd
|
||||
mode: '0644'
|
||||
mode: "0644"
|
||||
owner: root
|
||||
|
||||
- name: Provision iwd configuration
|
||||
|
|
@ -32,14 +33,14 @@
|
|||
ansible.builtin.template:
|
||||
src: templates/xps/iwd.j2
|
||||
dest: /etc/iwd/main.config
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
owner: root
|
||||
notify: restart iwd
|
||||
|
||||
- name: Remove leftover configuration files
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: '{{ item }}'
|
||||
path: "{{ item }}"
|
||||
state: absent
|
||||
loop:
|
||||
- /etc/systemd/network/30-vmbr0.network
|
||||
|
|
|
|||
|
|
@ -1,21 +1,22 @@
|
|||
---
|
||||
- name: Provision pollkit administrator configuration
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: 'templates/polkit.j2'
|
||||
dest: '/etc/polkit-1/rules.d/49-nopasswd_global.rules'
|
||||
mode: '0755'
|
||||
src: "templates/polkit.j2"
|
||||
dest: "/etc/polkit-1/rules.d/49-nopasswd_global.rules"
|
||||
mode: "0755"
|
||||
|
||||
- name: Install shared packages
|
||||
become: true
|
||||
community.general.pacman:
|
||||
name: '{{ packages }}'
|
||||
name: "{{ packages }}"
|
||||
|
||||
- name: Copy reflector configuration
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: 'templates/reflector.j2'
|
||||
dest: '/etc/xdg/reflector/reflector.conf'
|
||||
mode: '0600'
|
||||
src: "templates/reflector.j2"
|
||||
dest: "/etc/xdg/reflector/reflector.conf"
|
||||
mode: "0600"
|
||||
|
||||
# started by weekly timer
|
||||
- name: Disable reflector
|
||||
|
|
@ -96,19 +97,19 @@
|
|||
ansible.builtin.file:
|
||||
path: /etc/sysctl.d
|
||||
state: directory
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
|
||||
- name: Copy sysctl files
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
mode: '0755'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
mode: "0755"
|
||||
loop:
|
||||
- src: 'templates/sysctl/99-sysrq.conf.j2'
|
||||
dest: '/etc/sysctl.d/99-sysrq.conf'
|
||||
- src: 'templates/sysctl/98-forward.conf.j2'
|
||||
dest: '/etc/sysctl.d/98-foward.conf'
|
||||
- src: "templates/sysctl/99-sysrq.conf.j2"
|
||||
dest: "/etc/sysctl.d/99-sysrq.conf"
|
||||
- src: "templates/sysctl/98-forward.conf.j2"
|
||||
dest: "/etc/sysctl.d/98-foward.conf"
|
||||
notify: reload sysctl configuration
|
||||
|
||||
- name: Remove the modprobe.d directory
|
||||
|
|
@ -122,28 +123,28 @@
|
|||
ansible.builtin.file:
|
||||
path: /etc/modprobe.d
|
||||
state: directory
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
|
||||
- name: Copy modprobe configuration files
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
mode: '0755'
|
||||
loop: '{{ modprobe_templates }}'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
mode: "0755"
|
||||
loop: "{{ modprobe_templates }}"
|
||||
when: modprobe_templates
|
||||
|
||||
- name: Copy kernel parameters template
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: 'templates/{{ ansible_hostname }}/cmdline.j2'
|
||||
dest: '/etc/kernel/cmdline'
|
||||
mode: '0755'
|
||||
src: "templates/{{ ansible_hostname }}/cmdline.j2"
|
||||
dest: "/etc/kernel/cmdline"
|
||||
mode: "0755"
|
||||
|
||||
- name: Remove the mkinitcpio directories
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: '{{ item }}'
|
||||
path: "{{ item }}"
|
||||
state: absent
|
||||
loop:
|
||||
- /etc/mkinitcpio.conf.d
|
||||
|
|
@ -152,9 +153,9 @@
|
|||
- name: Recreate the mkinitcpio directories
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: '{{ item }}'
|
||||
path: "{{ item }}"
|
||||
state: directory
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
loop:
|
||||
- /etc/mkinitcpio.conf.d
|
||||
- /etc/mkinitcpio.d
|
||||
|
|
@ -166,7 +167,7 @@
|
|||
dest: "{{ item.dest }}"
|
||||
mode: "0755"
|
||||
loop: "{{ mkinitcpio_templates }}"
|
||||
when: "{{ mkinitcpio_templates | length > 0 }}"
|
||||
when: "mkinitcpio_templates | length > 0"
|
||||
|
||||
- name: Regenerate initramfs images
|
||||
become: true
|
||||
|
|
|
|||
|
|
@ -1,8 +1,9 @@
|
|||
---
|
||||
- name: Create configuration dir
|
||||
ansible.builtin.file:
|
||||
path: '{{ xdg_config_dir }}/syncthing'
|
||||
path: "{{ xdg_config_dir }}/syncthing"
|
||||
state: directory
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
|
||||
- name: Stop syncthing service
|
||||
ansible.builtin.systemd:
|
||||
|
|
@ -12,7 +13,7 @@
|
|||
|
||||
- name: Copy configuration file
|
||||
ansible.builtin.template:
|
||||
src: 'templates/syncthing/config.j2'
|
||||
dest: '{{ xdg_config_dir }}/syncthing/config.xml'
|
||||
mode: '0640'
|
||||
src: "templates/syncthing/config.j2"
|
||||
dest: "{{ xdg_config_dir }}/syncthing/config.xml"
|
||||
mode: "0640"
|
||||
notify: start syncthing
|
||||
|
|
|
|||
|
|
@ -1,29 +1,30 @@
|
|||
---
|
||||
- name: Setup systemd user service folder
|
||||
ansible.builtin.file:
|
||||
path: '{{ xdg_config_dir }}/systemd/user'
|
||||
path: "{{ xdg_config_dir }}/systemd/user"
|
||||
state: directory
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
|
||||
- name: Add ssh-agent service
|
||||
ansible.builtin.template:
|
||||
src: 'templates/ssh-agent.j2'
|
||||
dest: '{{ xdg_config_dir }}/systemd/user/ssh-agent.service'
|
||||
mode: '0644'
|
||||
src: "templates/ssh-agent.j2"
|
||||
dest: "{{ xdg_config_dir }}/systemd/user/ssh-agent.service"
|
||||
mode: "0644"
|
||||
notify: restart user ssh-agent
|
||||
|
||||
- name: Copy tmux service
|
||||
ansible.builtin.template:
|
||||
src: 'templates/tmux.j2'
|
||||
dest: '{{ xdg_config_dir }}/systemd/user/tmux.service'
|
||||
mode: '0644'
|
||||
src: "templates/tmux.j2"
|
||||
dest: "{{ xdg_config_dir }}/systemd/user/tmux.service"
|
||||
mode: "0644"
|
||||
notify:
|
||||
- user daemon-reload
|
||||
- restart tmux service
|
||||
|
||||
- name: Copy tmux startup script
|
||||
ansible.builtin.copy:
|
||||
src: 'files/tmux_start'
|
||||
dest: '{{ ansible_env.HOME }}/.local/bin/tmux_start'
|
||||
mode: '0740'
|
||||
src: "files/tmux_start"
|
||||
dest: "{{ ansible_env.HOME }}/.local/bin/tmux_start"
|
||||
mode: "0740"
|
||||
force: false
|
||||
# setup systemd-boot pacman hook
|
||||
|
|
|
|||
|
|
@ -1,45 +1,43 @@
|
|||
- name: copy timer files
|
||||
---
|
||||
- name: Copy timer files
|
||||
become: true
|
||||
template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
ansible.builtin.template:
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
owner: root
|
||||
mode: '0644'
|
||||
mode: "0644"
|
||||
loop:
|
||||
- { src: 'templates/timer/daily_timer.j2', dest: '/etc/systemd/system/daily.timer' }
|
||||
- { src: 'templates/timer/weekly_timer.j2', dest: '/etc/systemd/system/weekly.timer' }
|
||||
- { src: "templates/timer/daily_timer.j2", dest: "/etc/systemd/system/daily.timer" }
|
||||
- { src: "templates/timer/weekly_timer.j2", dest: "/etc/systemd/system/weekly.timer" }
|
||||
notify:
|
||||
- enable daily timer
|
||||
- enable weekly timer
|
||||
|
||||
- name: copy target files
|
||||
- name: Copy target files
|
||||
become: true
|
||||
template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
ansible.builtin.template:
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
owner: root
|
||||
mode: '0644'
|
||||
mode: "0644"
|
||||
loop:
|
||||
- { src: 'templates/timer/daily_target.j2', dest: '/etc/systemd/system/daily.target' }
|
||||
- {
|
||||
src: 'templates/timer/weekly_target.j2',
|
||||
dest: '/etc/systemd/system/weekly.target',
|
||||
}
|
||||
- { src: "templates/timer/daily_target.j2", dest: "/etc/systemd/system/daily.target" }
|
||||
- { src: "templates/timer/weekly_target.j2", dest: "/etc/systemd/system/weekly.target" }
|
||||
|
||||
- name: create target directories
|
||||
- name: Create target directories
|
||||
become: true
|
||||
file:
|
||||
path: '{{ item }}'
|
||||
ansible.builtin.file:
|
||||
path: "{{ item }}"
|
||||
state: directory
|
||||
owner: root
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
loop:
|
||||
- '/etc/systemd/system/daily.target.wants'
|
||||
- '/etc/systemd/system/weekly.target.wants'
|
||||
- "/etc/systemd/system/daily.target.wants"
|
||||
- "/etc/systemd/system/weekly.target.wants"
|
||||
|
||||
- name: add reflector to weekly timer
|
||||
- name: Add reflector to weekly timer
|
||||
become: true
|
||||
file:
|
||||
src: '/usr/lib/systemd/system/reflector.service'
|
||||
dest: '/etc/systemd/system/weekly.target.wants/reflector.service'
|
||||
ansible.builtin.file:
|
||||
src: "/usr/lib/systemd/system/reflector.service"
|
||||
dest: "/etc/systemd/system/weekly.target.wants/reflector.service"
|
||||
state: link
|
||||
|
|
|
|||
|
|
@ -1,3 +1,4 @@
|
|||
---
|
||||
- name: Include wireguard media defaults
|
||||
ansible.builtin.include_vars:
|
||||
file: vars/wireguard-media.yml
|
||||
|
|
@ -5,16 +6,16 @@
|
|||
- name: Create Wireguard directories
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: '{{ item }}'
|
||||
path: "{{ item }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0750'
|
||||
mode: "0750"
|
||||
state: directory
|
||||
recurse: true
|
||||
loop:
|
||||
- '{{ vpn_config_dir }}'
|
||||
- '{{ wireguard_media_defaults.private_key_path | dirname }}'
|
||||
- '{{ wireguard_media_defaults.public_key_path | dirname }}'
|
||||
- "{{ vpn_config_dir }}"
|
||||
- "{{ wireguard_media_defaults.private_key_path | dirname }}"
|
||||
- "{{ wireguard_media_defaults.public_key_path | dirname }}"
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
- restart systemd-resolved
|
||||
|
|
@ -22,17 +23,17 @@
|
|||
- name: Copy Wireguard credentials
|
||||
become: true
|
||||
ansible.builtin.copy:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0640'
|
||||
mode: "0640"
|
||||
loop:
|
||||
- dest: '{{ wireguard_media_defaults.public_key_path }}'
|
||||
src: 'files/wireguard-media/{{ ansible_hostname }}/fudiggity.pub'
|
||||
- dest: "{{ wireguard_media_defaults.public_key_path }}"
|
||||
src: "files/wireguard-media/{{ ansible_hostname }}/fudiggity.pub"
|
||||
|
||||
- dest: '{{ wireguard_media_defaults.private_key_path }}'
|
||||
src: 'files/wireguard-media/{{ ansible_hostname }}/fudiggity.key'
|
||||
- dest: "{{ wireguard_media_defaults.private_key_path }}"
|
||||
src: "files/wireguard-media/{{ ansible_hostname }}/fudiggity.key"
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
- restart systemd-resolved
|
||||
|
|
@ -40,12 +41,12 @@
|
|||
- name: Copy Wireguard preshared keys
|
||||
become: true
|
||||
ansible.builtin.copy:
|
||||
src: '{{ item.preshared_key_source_path }}'
|
||||
dest: '{{ item.preshared_key_path }}'
|
||||
src: "{{ item.preshared_key_source_path }}"
|
||||
dest: "{{ item.preshared_key_path }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0640'
|
||||
loop: '{{ wireguard_media_defaults.peers }}'
|
||||
mode: "0640"
|
||||
loop: "{{ wireguard_media_defaults.peers }}"
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
- restart systemd-resolved
|
||||
|
|
@ -53,17 +54,17 @@
|
|||
- name: Setup network configuration
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0640'
|
||||
mode: "0640"
|
||||
loop:
|
||||
- src: 'templates/{{ ansible_hostname }}/network/wg1.network.j2'
|
||||
dest: '/etc/systemd/network/40-wg1.network'
|
||||
- src: "templates/{{ ansible_hostname }}/network/wg1.network.j2"
|
||||
dest: "/etc/systemd/network/40-wg1.network"
|
||||
|
||||
- src: 'templates/{{ ansible_hostname }}/network/wg1.netdev.j2'
|
||||
dest: '/etc/systemd/network/40-wg1.netdev'
|
||||
- src: "templates/{{ ansible_hostname }}/network/wg1.netdev.j2"
|
||||
dest: "/etc/systemd/network/40-wg1.netdev"
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
- restart systemd-resolved
|
||||
|
|
|
|||
|
|
@ -1,3 +1,4 @@
|
|||
---
|
||||
- name: Include wireguard defaults
|
||||
ansible.builtin.include_vars:
|
||||
file: vars/wireguard.yml
|
||||
|
|
@ -5,16 +6,16 @@
|
|||
- name: Create Wireguard directories
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
path: '{{ item }}'
|
||||
path: "{{ item }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0750'
|
||||
mode: "0750"
|
||||
state: directory
|
||||
recurse: true
|
||||
loop:
|
||||
- '{{ vpn_config_dir }}'
|
||||
- '{{ wireguard_defaults.private_key_path | dirname }}'
|
||||
- '{{ wireguard_defaults.public_key_path | dirname }}'
|
||||
- "{{ vpn_config_dir }}"
|
||||
- "{{ wireguard_defaults.private_key_path | dirname }}"
|
||||
- "{{ wireguard_defaults.public_key_path | dirname }}"
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
- restart systemd-resolved
|
||||
|
|
@ -22,17 +23,17 @@
|
|||
- name: Copy Wireguard credentials
|
||||
become: true
|
||||
ansible.builtin.copy:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0640'
|
||||
mode: "0640"
|
||||
loop:
|
||||
- dest: '{{ wireguard_defaults.public_key_path }}'
|
||||
src: 'files/wireguard/{ ansible_hostname }}/fudiggity.pub'
|
||||
- dest: "{{ wireguard_defaults.public_key_path }}"
|
||||
src: "files/wireguard/{ ansible_hostname }}/fudiggity.pub"
|
||||
|
||||
- dest: '{{ wireguard_defaults.private_key_path }}'
|
||||
src: 'files/wireguard/{{ ansible_hostname }}/fudiggity.key'
|
||||
- dest: "{{ wireguard_defaults.private_key_path }}"
|
||||
src: "files/wireguard/{{ ansible_hostname }}/fudiggity.key"
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
- restart systemd-resolved
|
||||
|
|
@ -40,12 +41,12 @@
|
|||
- name: Copy Wireguard preshared keys
|
||||
become: true
|
||||
ansible.builtin.copy:
|
||||
src: '{{ item.preshared_key_source_path }}'
|
||||
dest: '{{ item.preshared_key_path }}'
|
||||
src: "{{ item.preshared_key_source_path }}"
|
||||
dest: "{{ item.preshared_key_path }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0640'
|
||||
loop: '{{ wireguard_defaults.peers }}'
|
||||
mode: "0640"
|
||||
loop: "{{ wireguard_defaults.peers }}"
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
- restart systemd-resolved
|
||||
|
|
@ -53,17 +54,17 @@
|
|||
- name: Setup network configuration
|
||||
become: true
|
||||
ansible.builtin.template:
|
||||
src: '{{ item.src }}'
|
||||
dest: '{{ item.dest }}'
|
||||
src: "{{ item.src }}"
|
||||
dest: "{{ item.dest }}"
|
||||
owner: root
|
||||
group: systemd-network
|
||||
mode: '0640'
|
||||
mode: "0640"
|
||||
loop:
|
||||
- src: 'templates/{{ ansible_hostname }}/network/wg0.network.j2'
|
||||
dest: '/etc/systemd/network/40-wg0.network'
|
||||
- src: "templates/{{ ansible_hostname }}/network/wg0.network.j2"
|
||||
dest: "/etc/systemd/network/40-wg0.network"
|
||||
|
||||
- src: 'templates/{{ ansible_hostname }}/network/wg0.netdev.j2'
|
||||
dest: '/etc/systemd/network/40-wg0.netdev'
|
||||
- src: "templates/{{ ansible_hostname }}/network/wg0.netdev.j2"
|
||||
dest: "/etc/systemd/network/40-wg0.netdev"
|
||||
notify:
|
||||
- restart systemd-networkd
|
||||
- restart systemd-resolved
|
||||
|
|
|
|||
|
|
@ -1,3 +1,4 @@
|
|||
---
|
||||
- name: Provision powertop systemd service
|
||||
become: true
|
||||
ansible.builtin.file:
|
||||
|
|
@ -8,21 +9,21 @@
|
|||
block:
|
||||
- name: Create configuration directory
|
||||
ansible.builtin.file:
|
||||
path: '{{ xdg_config_dir }}/pa-dlna'
|
||||
path: "{{ xdg_config_dir }}/pa-dlna"
|
||||
state: directory
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
|
||||
- name: Copy configuration file
|
||||
ansible.builtin.template:
|
||||
src: templates/xps/pa-dlna/config.j2
|
||||
dest: '{{ xdg_config_dir }}/pa-dlna/pa-dlna.conf'
|
||||
mode: '0755'
|
||||
dest: "{{ xdg_config_dir }}/pa-dlna/pa-dlna.conf"
|
||||
mode: "0755"
|
||||
|
||||
- name: Copy systemd service
|
||||
ansible.builtin.template:
|
||||
src: templates/xps/pa-dlna/service.j2
|
||||
dest: '{{ xdg_config_dir }}/systemd/user/pa-dlna.service'
|
||||
mode: '0755'
|
||||
dest: "{{ xdg_config_dir }}/systemd/user/pa-dlna.service"
|
||||
mode: "0755"
|
||||
|
||||
- name: Create virtualenv directory
|
||||
become: true
|
||||
|
|
@ -31,16 +32,16 @@
|
|||
state: directory
|
||||
owner: sonny
|
||||
group: sonny
|
||||
mode: '0755'
|
||||
mode: "0755"
|
||||
|
||||
- name: Install pa-dlna
|
||||
ansible.builtin.pip:
|
||||
name: 'pa-dlna=={{ pa_dlna_version }}'
|
||||
name: "pa-dlna=={{ pa_dlna_version }}"
|
||||
virtualenv: /opt/virtualenv/pa-dlna
|
||||
virtualenv_command: python3.13 -m venv
|
||||
|
||||
- name: Install python-systemd
|
||||
ansible.builtin.pip:
|
||||
name: 'python-systemd=={{ pa_dlna_systemd_version }}'
|
||||
name: "python-systemd=={{ pa_dlna_systemd_version }}"
|
||||
virtualenv: /opt/virtualenv/pa-dlna
|
||||
virtualenv_command: python3.13 -m venv
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue