ansible/roles/desktop/tasks/main.yml

#!/usr/bin/ansible-playbook
# vim:ft=ansible:
---
- name: Configure desktop system
  block:
    - name: Create config directories
      file:
        path: "{{ item }}"
        state: directory
        recurse: yes
      loop:
        - "/etc/X11/xorg.conf.d"
    - name: Nuke some configs
      file:
        path: "{{ item }}"
        state: absent
      loop:
        # Works around a bug where this causes failed logins
        - "/etc/X11/Xsession.d/70im-config_launch"
        # Works around SDDM never actually sourcing a user's xsessionrc
        - "/etc/X11/Xsession.d/99x11-common_start"
    - name: Copy system configs
      template:
        src: "{{ item.src }}"
        dest: "{{ item.dest }}"
        mode: "{{ item.mode }}"
      loop:
        - { src: "sshd_config", dest: "/etc/ssh/sshd_config", mode: "0644" }
        - { src: "nomouseaccel.conf", dest: "/etc/X11/xorg.conf.d/90-mouse-acceleration.conf", mode: "0644" }
        - { src: "i3.desktop", dest: "/usr/share/xsessions/i3-custom.desktop", mode: "0644" }
        - { src: "startx.desktop", dest: "/usr/share/xsessions/startx-custom.desktop", mode: "0644" }
    - name: Copy udev rules
      template:
        src: "{{ item.src }}"
        dest: "{{ item.dest }}"
        mode: "{{ item.mode }}"
      loop:
        - { src: "g810-led.rules", dest: "/etc/udev/rules.d/50-g810-led.rules", mode: "0644" }
        - { src: "switch-rcm.rules", dest: "/etc/udev/rules.d/50-switch-rcm.rules", mode: "0644" }
      notify: reload udev
    - name: Configure local Apache
      include_tasks: apache.yml
    - name: Configure SSH
      include_tasks: sshd.yml
    - name: Configure system packages
      include_tasks: packages.yml
    - name: Configure Mopidy
      include_tasks: mopidy.yml
    - name: Stop services
      systemd:
        name: "{{ item }}"
        enabled: no
        state: stopped
      loop:
        - mopidy.service
        - motd-news.timer
    - name: Start services
      systemd:
        name: "{{ item }}"
        enabled: yes
        state: started
      loop:
        - syncthing@salt.service
    - name: Template out backup module
      template:
        src: "backup.sh"
        dest: "/opt/backups/modules/desktop.sh"
        mode: "0600"
  become: yes