To hell with this crap
This commit is contained in:
parent
439729486c
commit
04145f21e0
@ -1,247 +0,0 @@
|
||||
---
|
||||
- hosts: localhost
|
||||
gather_facts: true
|
||||
become: true
|
||||
|
||||
tasks:
|
||||
- name: Configure /etc/apt/sources.list
|
||||
ansible.builtin.blockinfile:
|
||||
path: /etc/apt/sources.list
|
||||
owner: root
|
||||
group: root
|
||||
block: |
|
||||
deb http://debian.uchicago.edu/debian/ {{ansible_distribution_release}} main contrib non-free non-free-firmware
|
||||
deb http://debian.uchicago.edu/debian/ {{ansible_distribution_release}}-updates main contrib non-free non-free-firmware
|
||||
deb http://debian.uchicago.edu/debian/ {{ansible_distribution_release}}-backports main contrib non-free non-free-firmware
|
||||
deb http://security.debian.org/debian-security {{ansible_distribution_release}}-security main contrib non-free non-free-firmware
|
||||
|
||||
- name: Disable APT language translations
|
||||
ansible.builtin.lineinfile:
|
||||
path: /etc/apt/apt.conf.d/99translations
|
||||
line: 'Acquire::Languages "none";'
|
||||
owner: root
|
||||
group: root
|
||||
create: true
|
||||
|
||||
- name: Update APT repository cache
|
||||
ansible.builtin.apt:
|
||||
update_cache: true
|
||||
|
||||
- name: Run dist-upgrade if needed
|
||||
ansible.builtin.apt:
|
||||
upgrade: dist
|
||||
update_cache: true
|
||||
|
||||
- name: Add third-party repositories
|
||||
block:
|
||||
- name: Ensure /usr/share/keyrings exists
|
||||
ansible.builtin.file:
|
||||
path: /usr/share/keyrings
|
||||
state: directory
|
||||
mode: 0755
|
||||
|
||||
- name: Add Tailscale repo key
|
||||
ansible.builtin.get_url:
|
||||
url: "https://pkgs.tailscale.com/stable/debian/{{ansible_distribution_release}}.noarmor.gpg"
|
||||
dest: /usr/share/keyrings/tailscale-archive-keyring.gpg
|
||||
|
||||
- name: Add Tailscale repo
|
||||
ansible.builtin.get_url:
|
||||
url: https://pkgs.tailscale.com/stable/debian/bookworm.tailscale-keyring.list
|
||||
dest: /etc/apt/sources.list.d/tailscale.list
|
||||
|
||||
- name: Install APT packages
|
||||
ansible.builtin.apt:
|
||||
update_cache: true
|
||||
default_release: "{{ansible_distribution_release}}-backports"
|
||||
state: present
|
||||
pkg:
|
||||
- apt-file
|
||||
- apt-listbugs
|
||||
- apt-listchanges
|
||||
- apt-transport-https
|
||||
- atop
|
||||
- autoconf
|
||||
- automake
|
||||
- autossh
|
||||
- borgbackup
|
||||
- borgmatic
|
||||
- breeze-gtk-theme
|
||||
- breeze-icon-theme
|
||||
- btop
|
||||
- build-essential
|
||||
- curl
|
||||
- dnsutils
|
||||
- emacs
|
||||
- firewalld
|
||||
- flatpak
|
||||
- fonts-noto-color-emoji
|
||||
- fonts-noto-mono
|
||||
- git
|
||||
- git-core
|
||||
- golang
|
||||
- htop
|
||||
- hugo
|
||||
- jc
|
||||
- jq
|
||||
- lynx
|
||||
- ncat
|
||||
- ndiff
|
||||
- nextcloud-desktop
|
||||
- nodejs
|
||||
- npm
|
||||
- optipng
|
||||
- papirus-icon-theme
|
||||
- pass
|
||||
- pipx
|
||||
- podman
|
||||
- python3-dev
|
||||
- python3-pip
|
||||
- rsync
|
||||
- systemd-resolved
|
||||
- tailscale
|
||||
- tuptime
|
||||
- w3m
|
||||
- w3m-img
|
||||
- wget
|
||||
- wireshark
|
||||
- zip
|
||||
- zsh
|
||||
|
||||
- name: Configure XDG user dirs defaults
|
||||
ansible.builtin.blockinfile:
|
||||
path: /etc/xdg/user-dirs.defaults
|
||||
owner: root
|
||||
group: root
|
||||
mode: 0644
|
||||
block: |
|
||||
DESKTOP=desktop
|
||||
DOWNLOAD=downloads
|
||||
TEMPLATES=
|
||||
PUBLICSHARE=sync
|
||||
DOCUMENTS=sync/documents
|
||||
MUSIC=
|
||||
PICTURES=sync/pictures
|
||||
VIDEOS=sync/videos
|
||||
|
||||
- name: Remove old ~/.config/user-dirs.dirs
|
||||
ansible.builtin.file:
|
||||
path: /home/jas/.config/user-dirs.dirs
|
||||
state: absent
|
||||
|
||||
- name: Remove unneeded XDG user dirs
|
||||
ansible.builtin.file:
|
||||
path: "/home/jas/{{ item }}"
|
||||
state: absent
|
||||
with_items:
|
||||
- Desktop
|
||||
- Documents
|
||||
- Downloads
|
||||
- Music
|
||||
- Pictures
|
||||
- Public
|
||||
- Templates
|
||||
- Videos
|
||||
|
||||
- name: Run xdg-user-dirs-update
|
||||
ansible.builtin.command: xdg-user-dirs-update
|
||||
become_user: jas
|
||||
|
||||
- name: Reconfigure fontconfig-config - hinting_type
|
||||
ansible.builtin.debconf:
|
||||
name: fontconfig-config
|
||||
question: fontconfig/hinting_type
|
||||
value: Autohinter
|
||||
vtype: select
|
||||
|
||||
- name: Reconfigure fontconfig-config - enable_bitmaps
|
||||
ansible.builtin.debconf:
|
||||
name: fontconfig-config
|
||||
question: fontconfig/enable_bitmaps
|
||||
value: false
|
||||
vtype: boolean
|
||||
|
||||
- name: Reconfigure fontconfig-config - hinting_style
|
||||
ansible.builtin.debconf:
|
||||
name: fontconfig-config
|
||||
question: fontconfig/hinting_style
|
||||
value: hintslight
|
||||
vtype: select
|
||||
|
||||
- name: Reconfigure fontconfig-config - subpixel_rendering
|
||||
ansible.builtin.debconf:
|
||||
name: fontconfig-config
|
||||
question: fontconfig/subpixel_rendering
|
||||
value: Always
|
||||
vtype: select
|
||||
|
||||
- name: Configure systemd-networkd (desktop)
|
||||
ansible.builtin.blockinfile:
|
||||
path: /etc/systemd/network/eno1.network
|
||||
owner: root
|
||||
group: root
|
||||
mode: 0644
|
||||
block: |
|
||||
[Match]
|
||||
Name=eno1
|
||||
|
||||
[Network]
|
||||
Address=10.0.0.2/24
|
||||
Gateway=10.0.0.1
|
||||
Broadcast=10.0.0.255
|
||||
DNS=9.9.9.9
|
||||
#DNS=100.100.100.100
|
||||
DNSSEC=true
|
||||
when:
|
||||
- ansible_hostname == "desktop"
|
||||
|
||||
- name: Enable systemd-networkd on startup (desktop)
|
||||
ansible.builtin.systemd_service:
|
||||
name: systemd-networkd.service
|
||||
enabled: true
|
||||
when:
|
||||
- ansible_hostname == "desktop"
|
||||
|
||||
- name: Disable NetworkManager and networking.service (desktop)
|
||||
ansible.builtin.systemd_service:
|
||||
name: "{{ item }}"
|
||||
enabled: false
|
||||
with_items:
|
||||
- NetworkManager.service
|
||||
- networking.service
|
||||
when:
|
||||
- ansible_hostname == "desktop"
|
||||
|
||||
- name: Disable wpa_supplicant (desktop)
|
||||
ansible.builtin.systemd_service:
|
||||
name: wpa_supplicant.service
|
||||
enabled: false
|
||||
when:
|
||||
- ansible_hostname == "desktop"
|
||||
|
||||
- name: Disable ipv6 in GRUB config
|
||||
ansible.builtin.lineinfile:
|
||||
path: /etc/default/grub
|
||||
search_string: "GRUB_CMDLINE_LINUX_DEFAULT"
|
||||
line: 'GRUB_CMDLINE_LINUX_DEFAULT="quiet ipv6.disable=1"'
|
||||
owner: root
|
||||
group: root
|
||||
mode: 0644
|
||||
|
||||
- name: Change jas user shell to zsh
|
||||
ansible.builtin.user:
|
||||
name: jas
|
||||
shell: /usr/bin/zsh
|
||||
|
||||
- name: Disable CUPS services
|
||||
ansible.builtin.systemd_service:
|
||||
name: "{{ item }}"
|
||||
enabled: false
|
||||
with_items:
|
||||
- cups-browsed.service
|
||||
- cups.service
|
||||
|
||||
- name: Disable avahi-daemon (desktop)
|
||||
ansible.builtin.systemd_service:
|
||||
name: avahi-daemon.service
|
||||
enabled: false
|
||||
Loading…
x
Reference in New Issue
Block a user