x220: playbook for when the laptop acts as a backup for main laptop

Sponsored-by: author

1 files changed, 101 insertions, 0 deletions

diff --git a/ansible/x220.yml b/ansible/x220.yml
new file mode 100644
index 0000000..e60faca
--- /dev/null
+++ b/ansible/x220.yml
@@ -0,0 +1,101 @@
+- hosts: x220
+  remote_user: root
+  roles:
+    - role: sane_debian_system
+    - role: ssd
+    - role: comfortable-debian-system
+    - role: chaoskey-host
+    - role: intel-wifi
+    - role: version-controller
+    - role: emacs
+    - role: gnupg-workstation
+    - role: gnome-system
+    - role: ansible
+    - role: liw-usual
+    - role: unix_users
+    - role: thinkpad
+  tasks:
+    - apt:
+        name:
+          - ssh
+          - build-essential
+          - hugo
+
+    - lineinfile:
+        path: /etc/xdg/autostart/gnome-keyring-ssh.desktop
+        line: Hidden=true
+
+    - lineinfile:
+        path: /etc/X11/Xsession.options
+        line: use-ssh-agent
+        state: absent
+
+    - file:
+        state: directory
+        path: /home/liw/.config/autostart
+        owner: liw
+        group: liw
+
+    - copy:
+        content: |
+          [Desktop Entry]
+          Type=Application
+          Name=gpg-agent
+          Comment=gpg-agent
+          Exec=/usr/bin/gpg-agent --daemon
+          OnlyShowIn=GNOME;Unity;MATE;
+          X-GNOME-Autostart-Phase=PreDisplayServer
+          X-GNOME-AutoRestart=false
+          X-GNOME-Autostart-Notify=true
+          X-GNOME-Bugzilla-Bugzilla=GNOME
+          X-GNOME-Bugzilla-Product=gnome-keyring
+          X-GNOME-Bugzilla-Component=general
+          X-GNOME-Bugzilla-Version=3.20.0
+        dest: /home/liw/.config/autostart/gpg-agent.desktop
+        owner: liw
+        group: liw
+
+  vars:
+    ansible_python_interpreter: /usr/bin/python3
+
+    sane_debian_system_version: 2
+    sane_debian_system_hostname: x220
+    sane_debian_system_codename: bullseye
+    sane_debian_system_timezone: Europe/Helsinki
+    sane_debian_system_sources_lists:
+      - repo: |
+          deb http://deb.debian.org/debian bullseye contrib non-free
+
+      - repo: |
+          deb-src http://deb.debian.org/debian bullseye main contrib non-free
+
+      - repo: |
+          deb http://security.debian.org/debian-security bullseye-security main contrib non-free
+
+      - repo: |
+          deb http://code.liw.fi/debian unstable main
+        signing_key: "{{ code_liw_fi_signing_key }}"
+
+      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
+        signing_key: "{{ ci_prod_signing_key }}"
+
+      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable main
+        signing_key: "{{ ci_prod_signing_key }}"
+
+    unix_users_version: 2
+    unix_users:
+      - username: liw
+        comment: Lars Wirzenius
+        sudo: yes
+        groups:
+          - dialout
+        authorized_keys: |
+          {{ liw_personal_ssh_pub }}
+
+    mailname: exolobe1.liw.fi
+
+    hostname: "{{ sane_debian_system_hostname }}"
+    relayhost: pieni.net:587
+    smarthost: pieni.net
+    smarthost_user: pienirelay
+    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"