- name: setup desktop systemd networkd
  become: yes
  template:
    src: 'templates/desktop/network.j2'
    dest: '/etc/systemd/network/20-wired.network'
    owner: root
    group: root
    mode: '0644'
  notify: restart systemd-networkd
  when: platform == "desktop"

- name: setup laptop systemd networkd
  become: yes
  template:
    src: 'templates/laptop/network.j2'
    dest: '/etc/systemd/network/20-wireless.network'
    owner: root
    group: root
    mode: '0644'
  notify: restart systemd-networkd
  when: platform == "laptop"

- name: start systemd-resolved service
  become: yes
  systemd:
    name: systemd-resolved
    state: started
    enabled: yes

- name: start iwd service
  become: yes
  systemd:
    name: iwd
    state: started
    enabled: yes
  when: platform == "laptop"

- name: copy firewall template
  become: yes
  template:
    src: 'templates/{{ platform }}/nftables.j2'
    dest: '/etc/nftables.conf'
    owner: root
    group: root
    mode: '0600'
  notify: restart nftables