summaryrefslogtreecommitdiff
path: root/ansible/x220.yml
blob: e60facab8f43b0c6e8c62971d41cb131626966d0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
- hosts: x220
  remote_user: root
  roles:
    - role: sane_debian_system
    - role: ssd
    - role: comfortable-debian-system
    - role: chaoskey-host
    - role: intel-wifi
    - role: version-controller
    - role: emacs
    - role: gnupg-workstation
    - role: gnome-system
    - role: ansible
    - role: liw-usual
    - role: unix_users
    - role: thinkpad
  tasks:
    - apt:
        name:
          - ssh
          - build-essential
          - hugo

    - lineinfile:
        path: /etc/xdg/autostart/gnome-keyring-ssh.desktop
        line: Hidden=true

    - lineinfile:
        path: /etc/X11/Xsession.options
        line: use-ssh-agent
        state: absent

    - file:
        state: directory
        path: /home/liw/.config/autostart
        owner: liw
        group: liw

    - copy:
        content: |
          [Desktop Entry]
          Type=Application
          Name=gpg-agent
          Comment=gpg-agent
          Exec=/usr/bin/gpg-agent --daemon
          OnlyShowIn=GNOME;Unity;MATE;
          X-GNOME-Autostart-Phase=PreDisplayServer
          X-GNOME-AutoRestart=false
          X-GNOME-Autostart-Notify=true
          X-GNOME-Bugzilla-Bugzilla=GNOME
          X-GNOME-Bugzilla-Product=gnome-keyring
          X-GNOME-Bugzilla-Component=general
          X-GNOME-Bugzilla-Version=3.20.0
        dest: /home/liw/.config/autostart/gpg-agent.desktop
        owner: liw
        group: liw

  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: x220
    sane_debian_system_codename: bullseye
    sane_debian_system_timezone: Europe/Helsinki
    sane_debian_system_sources_lists:
      - repo: |
          deb http://deb.debian.org/debian bullseye contrib non-free

      - repo: |
          deb-src http://deb.debian.org/debian bullseye main contrib non-free

      - repo: |
          deb http://security.debian.org/debian-security bullseye-security main contrib non-free

      - repo: |
          deb http://code.liw.fi/debian unstable main
        signing_key: "{{ code_liw_fi_signing_key }}"

      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable-ci main
        signing_key: "{{ ci_prod_signing_key }}"

      - repo: deb http://ci-prod-controller.vm.liw.fi/debian unstable main
        signing_key: "{{ ci_prod_signing_key }}"

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius
        sudo: yes
        groups:
          - dialout
        authorized_keys: |
          {{ liw_personal_ssh_pub }}

    mailname: exolobe1.liw.fi

    hostname: "{{ sane_debian_system_hostname }}"
    relayhost: pieni.net:587
    smarthost: pieni.net
    smarthost_user: pienirelay
    smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"