This commit is contained in:
Jeffrey Serio 2025-01-25 12:56:20 -06:00
parent f6a7aefd05
commit 439729486c

View File

@ -1,5 +1,5 @@
--- ---
- hosts: local - hosts: localhost
gather_facts: true gather_facts: true
become: true become: true
@ -26,32 +26,14 @@
- name: Update APT repository cache - name: Update APT repository cache
ansible.builtin.apt: ansible.builtin.apt:
update_cache: true update_cache: true
default_release: "{{ansible_distribution_release}}-backports"
- name: Run dist-upgrade if needed - name: Run dist-upgrade if needed
ansible.builtin.apt: ansible.builtin.apt:
upgrade: dist upgrade: dist
update_cache: true update_cache: true
default_release: "{{ansible_distribution_release}}-backports"
- name: Add third-party repositories - name: Add third-party repositories
block: block:
- name: Ensure /etc/apt/keyrings exists
ansible.builtin.file:
path: /etc/apt/keyrings
state: directory
mode: 0755
- name: Add charm repo key
ansible.builtin.get_url:
url: https://repo.charm.sh/apt/gpg.key
dest: /etc/apt/keyrings/charm.gpg
- name: Add charm repo
ansible.builtin.apt_repository:
repo: "deb [signed-by=/etc/apt/keyrings/charm.gpg] https://repo.charm.sh/apt/ * *"
state: present
- name: Ensure /usr/share/keyrings exists - name: Ensure /usr/share/keyrings exists
ansible.builtin.file: ansible.builtin.file:
path: /usr/share/keyrings path: /usr/share/keyrings
@ -89,24 +71,20 @@
- btop - btop
- build-essential - build-essential
- curl - curl
- devilspie2
- dnsutils - dnsutils
- emacs - emacs
- firewalld - firewalld
- flatpak - flatpak
- fonts-noto-color-emoji - fonts-noto-color-emoji
- fonts-noto-mono - fonts-noto-mono
- galculator
- git - git
- git-core - git-core
- golang - golang
- gum
- htop - htop
- hugo - hugo
- jc - jc
- jq - jq
- lynx - lynx
- maim
- ncat - ncat
- ndiff - ndiff
- nextcloud-desktop - nextcloud-desktop
@ -119,7 +97,6 @@
- podman - podman
- python3-dev - python3-dev
- python3-pip - python3-pip
- rofi
- rsync - rsync
- systemd-resolved - systemd-resolved
- tailscale - tailscale
@ -128,10 +105,6 @@
- w3m-img - w3m-img
- wget - wget
- wireshark - wireshark
- xclip
- xdotool
- xfce4-genmon-plugin
- xfce4-weather-plugin
- zip - zip
- zsh - zsh
@ -202,16 +175,6 @@
value: Always value: Always
vtype: select vtype: select
- name: Disable unneeded services
ansible.builtin.systemd_service:
name: "{{ item }}"
enabled: false
with_items:
- avahi-daemon.service
- avahi-daemon.socket
- cups-browsed.service
- cups.service
- name: Configure systemd-networkd (desktop) - name: Configure systemd-networkd (desktop)
ansible.builtin.blockinfile: ansible.builtin.blockinfile:
path: /etc/systemd/network/eno1.network path: /etc/systemd/network/eno1.network
@ -232,39 +195,24 @@
when: when:
- ansible_hostname == "desktop" - ansible_hostname == "desktop"
- name: Configure systemd-networkd (laptop) - name: Enable systemd-networkd on startup (desktop)
ansible.builtin.blockinfile:
path: /etc/systemd/network/wlp0s20f3.network
owner: root
group: root
mode: 0644
block: |
[Match]
Name=wlp0s20f3
[Link]
RequiredForOnline=routable
[Network]
DHCP=yes
IgnoreCarrierLoss=3s
when:
- ansible_hostname == "laptop"
- name: Enable systemd-networkd on startup
ansible.builtin.systemd_service: ansible.builtin.systemd_service:
name: systemd-networkd.service name: systemd-networkd.service
enabled: true enabled: true
when:
- ansible_hostname == "desktop"
- name: Disable NetworkManager and networking.service - name: Disable NetworkManager and networking.service (desktop)
ansible.builtin.systemd_service: ansible.builtin.systemd_service:
name: "{{ item }}" name: "{{ item }}"
enabled: false enabled: false
with_items: with_items:
- NetworkManager.service - NetworkManager.service
- networking.service - networking.service
when:
- ansible_hostname == "desktop"
- name: Disable wpa_supplicant on desktop - name: Disable wpa_supplicant (desktop)
ansible.builtin.systemd_service: ansible.builtin.systemd_service:
name: wpa_supplicant.service name: wpa_supplicant.service
enabled: false enabled: false
@ -284,3 +232,16 @@
ansible.builtin.user: ansible.builtin.user:
name: jas name: jas
shell: /usr/bin/zsh shell: /usr/bin/zsh
- name: Disable CUPS services
ansible.builtin.systemd_service:
name: "{{ item }}"
enabled: false
with_items:
- cups-browsed.service
- cups.service
- name: Disable avahi-daemon (desktop)
ansible.builtin.systemd_service:
name: avahi-daemon.service
enabled: false