From e1ddba6b2afe9a34b6aeaafeeb06847ec9f8ad32 Mon Sep 17 00:00:00 2001
From: Lars Wirzenius <liw@liw.fi>
Date: Mon, 11 Apr 2022 09:55:10 +0300
Subject: kea: fix for re-install

Sponsored-by: author
---
 ansible/kea.yml | 57 ++++++++++++++++++++++++++++++++++++++-------------------
 1 file changed, 38 insertions(+), 19 deletions(-)

(limited to 'ansible')

diff --git a/ansible/kea.yml b/ansible/kea.yml
index cfa04d2..610c6d3 100644
--- a/ansible/kea.yml
+++ b/ansible/kea.yml
@@ -1,13 +1,16 @@
 - hosts: kea
-  remote_user: ansible
-  become: yes
+  remote_user: root
+  become: no
   roles:
     - role: sane_debian_system
       tags: [sane]
     - comfortable-debian-system
-    - unix_users
+    - gnome-system
     - smarthost-client
     - intel-wifi
+    - self-updating-system
+    - ssd
+    - unix_users
   tasks:
     - lineinfile:
         path: /etc/gdm3/daemon.conf
@@ -31,27 +34,43 @@
         port: ssh
         rule: allow
   vars:
-    sane_debian_system_version: 0
-    unix_users_version: 1
+    ansible_python_interpreter: /usr/bin/python3
 
-    hostname: kea
-    debian_codename: buster
+    sane_debian_system_version: 2
+    sane_debian_system_hostname: kea
+    sane_debian_system_codename: bullseye
+    sane_debian_system_timezone: Europe/Helsinki
+    sane_debian_system_sources_lists:
+      - repo: |
+          deb http://deb.debian.org/debian bullseye contrib non-free
 
-    mailname: kea.liw.fi
-    timezone: Europe/Helsinki
+      - repo: |
+          deb-src http://deb.debian.org/debian bullseye main contrib non-free
 
-    relayhost: pieni.net:587
-    smarthost: pieni.net
-    smarthost_user: pienirelay
-    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"
+      - repo: |
+          deb http://security.debian.org/debian-security bullseye-security main contrib non-free
 
+    unix_users_version: 2
     unix_users:
-      - username: ansible
-        comment: Ansible
-        sudo: yes
+      - username: soile
+        comment: Soile Mottisenkangas
+        groups:
+          - audio
+          - bluetooth
+          - cdrom
+          - dialout
+          - dip
+          - floppy
+          - netdev
+          - plugdev
+          - scanner
+          - video
         authorized_keys: |
           {{ liw_personal_ssh_pub }}
 
-    sources_lists:
-      - repo: |
-          deb http://deb.debian.org/debian buster contrib non-free
+    mailname: kea.liw.fi
+    hostname: "{{ sane_debian_system_hostname }}"
+    relayhost: pieni.net:587
+    smarthost: pieni.net
+    smarthost_user: pienirelay
+    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"
-- 
cgit v1.2.1