···

       
1
       
1
       
 
       
---

     

       
2
       
2
       
-
       
- hosts: local

     

       
2
       
2
       
+
       
- hosts: localhost

     

       
3
       
3
       
 
       
  gather_facts: true

     

       
4
       
4
       
 
       
  become: true

     

       
5
       
5
       
 
       


     
···

       
26
       
26
       
 
       
    - name: Update APT repository cache

     

       
27
       
27
       
 
       
      ansible.builtin.apt:

     

       
28
       
28
       
 
       
        update_cache: true

     

       
29
       
29
       
-
       
        default_release: "{{ansible_distribution_release}}-backports"

     

       
30
       
29
       
 
       


     

       
31
       
30
       
 
       
    - name: Run dist-upgrade if needed

     

       
32
       
31
       
 
       
      ansible.builtin.apt:

     

       
33
       
32
       
 
       
        upgrade: dist

     

       
34
       
33
       
 
       
        update_cache: true

     

       
35
       
35
       
-
       
        default_release: "{{ansible_distribution_release}}-backports"

     

       
36
       
34
       
 
       


     

       
37
       
35
       
 
       
    - name: Add third-party repositories

     

       
38
       
36
       
 
       
      block:

     

       
39
       
39
       
-
       
        - name: Ensure /etc/apt/keyrings exists

     

       
40
       
40
       
-
       
          ansible.builtin.file:

     

       
41
       
41
       
-
       
            path: /etc/apt/keyrings

     

       
42
       
42
       
-
       
            state: directory

     

       
43
       
43
       
-
       
            mode: 0755

     

       
44
       
44
       
-
       


     

       
45
       
45
       
-
       
        - name: Add charm repo key

     

       
46
       
46
       
-
       
          ansible.builtin.get_url:

     

       
47
       
47
       
-
       
            url: https://repo.charm.sh/apt/gpg.key

     

       
48
       
48
       
-
       
            dest: /etc/apt/keyrings/charm.gpg

     

       
49
       
49
       
-
       


     

       
50
       
50
       
-
       
        - name: Add charm repo

     

       
51
       
51
       
-
       
          ansible.builtin.apt_repository:

     

       
52
       
52
       
-
       
            repo: "deb [signed-by=/etc/apt/keyrings/charm.gpg] https://repo.charm.sh/apt/ * *"

     

       
53
       
53
       
-
       
            state: present

     

       
54
       
54
       
-
       


     

       
55
       
37
       
 
       
        - name: Ensure /usr/share/keyrings exists

     

       
56
       
38
       
 
       
          ansible.builtin.file:

     

       
57
       
39
       
 
       
            path: /usr/share/keyrings

     
···

       
89
       
71
       
 
       
          - btop

     

       
90
       
72
       
 
       
          - build-essential

     

       
91
       
73
       
 
       
          - curl

     

       
92
       
92
       
-
       
          - devilspie2

     

       
93
       
74
       
 
       
          - dnsutils

     

       
94
       
75
       
 
       
          - emacs

     

       
95
       
76
       
 
       
          - firewalld

     

       
96
       
77
       
 
       
          - flatpak

     

       
97
       
78
       
 
       
          - fonts-noto-color-emoji

     

       
98
       
79
       
 
       
          - fonts-noto-mono

     

       
99
       
99
       
-
       
          - galculator

     

       
100
       
80
       
 
       
          - git

     

       
101
       
81
       
 
       
          - git-core

     

       
102
       
82
       
 
       
          - golang

     

       
103
       
103
       
-
       
          - gum

     

       
104
       
83
       
 
       
          - htop

     

       
105
       
84
       
 
       
          - hugo

     

       
106
       
85
       
 
       
          - jc

     

       
107
       
86
       
 
       
          - jq

     

       
108
       
87
       
 
       
          - lynx

     

       
109
       
109
       
-
       
          - maim

     

       
110
       
88
       
 
       
          - ncat

     

       
111
       
89
       
 
       
          - ndiff

     

       
112
       
90
       
 
       
          - nextcloud-desktop

     
···

       
119
       
97
       
 
       
          - podman

     

       
120
       
98
       
 
       
          - python3-dev

     

       
121
       
99
       
 
       
          - python3-pip

     

       
122
       
122
       
-
       
          - rofi

     

       
123
       
100
       
 
       
          - rsync

     

       
124
       
101
       
 
       
          - systemd-resolved

     

       
125
       
102
       
 
       
          - tailscale

     
···

       
128
       
105
       
 
       
          - w3m-img

     

       
129
       
106
       
 
       
          - wget

     

       
130
       
107
       
 
       
          - wireshark

     

       
131
       
131
       
-
       
          - xclip

     

       
132
       
132
       
-
       
          - xdotool

     

       
133
       
133
       
-
       
          - xfce4-genmon-plugin

     

       
134
       
134
       
-
       
          - xfce4-weather-plugin

     

       
135
       
108
       
 
       
          - zip

     

       
136
       
109
       
 
       
          - zsh

     

       
137
       
110
       
 
       


     
···

       
202
       
175
       
 
       
        value: Always

     

       
203
       
176
       
 
       
        vtype: select

     

       
204
       
177
       
 
       


     

       
205
       
205
       
-
       
    - name: Disable unneeded services

     

       
206
       
206
       
-
       
      ansible.builtin.systemd_service:

     

       
207
       
207
       
-
       
        name: "{{ item }}"

     

       
208
       
208
       
-
       
        enabled: false

     

       
209
       
209
       
-
       
      with_items:

     

       
210
       
210
       
-
       
        - avahi-daemon.service

     

       
211
       
211
       
-
       
        - avahi-daemon.socket

     

       
212
       
212
       
-
       
        - cups-browsed.service

     

       
213
       
213
       
-
       
        - cups.service

     

       
214
       
214
       
-
       


     

       
215
       
178
       
 
       
    - name: Configure systemd-networkd (desktop)

     

       
216
       
179
       
 
       
      ansible.builtin.blockinfile:

     

       
217
       
180
       
 
       
        path: /etc/systemd/network/eno1.network

     
···

       
232
       
195
       
 
       
      when:

     

       
233
       
196
       
 
       
        - ansible_hostname == "desktop"

     

       
234
       
197
       
 
       


     

       
235
       
235
       
-
       
    - name: Configure systemd-networkd (laptop)

     

       
236
       
236
       
-
       
      ansible.builtin.blockinfile:

     

       
237
       
237
       
-
       
        path: /etc/systemd/network/wlp0s20f3.network

     

       
238
       
238
       
-
       
        owner: root

     

       
239
       
239
       
-
       
        group: root

     

       
240
       
240
       
-
       
        mode: 0644

     

       
241
       
241
       
-
       
        block: |

     

       
242
       
242
       
-
       
          [Match]

     

       
243
       
243
       
-
       
          Name=wlp0s20f3

     

       
244
       
244
       
-
       


     

       
245
       
245
       
-
       
          [Link]

     

       
246
       
246
       
-
       
          RequiredForOnline=routable

     

       
247
       
247
       
-
       


     

       
248
       
248
       
-
       
          [Network]

     

       
249
       
249
       
-
       
          DHCP=yes

     

       
250
       
250
       
-
       
          IgnoreCarrierLoss=3s

     

       
251
       
251
       
-
       
      when:

     

       
252
       
252
       
-
       
        - ansible_hostname == "laptop"

     

       
253
       
253
       
-
       


     

       
254
       
254
       
-
       
    - name: Enable systemd-networkd on startup

     

       
198
       
198
       
+
       
    - name: Enable systemd-networkd on startup (desktop)

     

       
255
       
199
       
 
       
      ansible.builtin.systemd_service:

     

       
256
       
200
       
 
       
        name: systemd-networkd.service

     

       
257
       
201
       
 
       
        enabled: true

     

       
202
       
202
       
+
       
      when:

     

       
203
       
203
       
+
       
        - ansible_hostname == "desktop"

     

       
258
       
204
       
 
       


     

       
259
       
259
       
-
       
    - name: Disable NetworkManager and networking.service

     

       
205
       
205
       
+
       
    - name: Disable NetworkManager and networking.service (desktop)

     

       
260
       
206
       
 
       
      ansible.builtin.systemd_service:

     

       
261
       
207
       
 
       
        name: "{{ item }}"

     

       
262
       
208
       
 
       
        enabled: false

     

       
263
       
209
       
 
       
      with_items:

     

       
264
       
210
       
 
       
        - NetworkManager.service

     

       
265
       
211
       
 
       
        - networking.service

     

       
212
       
212
       
+
       
      when:

     

       
213
       
213
       
+
       
        - ansible_hostname == "desktop"

     

       
266
       
214
       
 
       


     

       
267
       
267
       
-
       
    - name: Disable wpa_supplicant on desktop

     

       
215
       
215
       
+
       
    - name: Disable wpa_supplicant (desktop)

     

       
268
       
216
       
 
       
      ansible.builtin.systemd_service:

     

       
269
       
217
       
 
       
        name: wpa_supplicant.service

     

       
270
       
218
       
 
       
        enabled: false

     
···

       
284
       
232
       
 
       
      ansible.builtin.user:

     

       
285
       
233
       
 
       
        name: jas

     

       
286
       
234
       
 
       
        shell: /usr/bin/zsh

     

       
235
       
235
       
+
       


     

       
236
       
236
       
+
       
    - name: Disable CUPS services

     

       
237
       
237
       
+
       
      ansible.builtin.systemd_service:

     

       
238
       
238
       
+
       
        name: "{{ item }}"

     

       
239
       
239
       
+
       
        enabled: false

     

       
240
       
240
       
+
       
      with_items:

     

       
241
       
241
       
+
       
        - cups-browsed.service

     

       
242
       
242
       
+
       
        - cups.service

     

       
243
       
243
       
+
       


     

       
244
       
244
       
+
       
    - name: Disable avahi-daemon (desktop)

     

       
245
       
245
       
+
       
      ansible.builtin.systemd_service:

     

       
246
       
246
       
+
       
        name: avahi-daemon.service

     

       
247
       
247
       
+
       
        enabled: false