diff --git a/roles/lmn_kde/tasks/main.yml b/roles/lmn_kde/tasks/main.yml
index b69332d..74912dc 100644
--- a/roles/lmn_kde/tasks/main.yml
+++ b/roles/lmn_kde/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 - name: Install desktop and educational packages
-  apt:
+  ansible.builtin.apt:
     name:
       - akonadi-backend-sqlite
       - arduino
@@ -40,13 +40,13 @@
     state: latest
 
 - name: Add {{ ansible_distribution_release }}-backports
-  apt_repository:
+  ansible.builtin.apt_repository:
     repo: deb http://deb.debian.org/debian/ {{ ansible_distribution_release }}-backports main non-free-firmware
     state: present
     update_cache: true
 
 - name: Install extra packages from backports
-  apt:
+  ansible.builtin.apt:
     name:
       - filius
       - kicad
@@ -65,7 +65,7 @@
     mode: '0755'
 
 - name: Use sqlite in akonadi
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/xdg/akonadi/akonadiserverrc
     create: true
     block: |
@@ -74,7 +74,7 @@
 
 ## Akonadi complains if not set:
 - name: Add home dirs to apparmor
-  lineinfile:
+  ansible.builtin.lineinfile:
     dest: /etc/apparmor.d/tunables/home.d/ubuntu
     line: >-
       @{HOMEDIRS}+=/srv/samba/schools/default-school/teachers/
@@ -83,7 +83,7 @@
 
 
 - name: tune SDDM login
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/sddm.conf
     create: true
     block: |
@@ -107,7 +107,7 @@
   when: not (groups.teacherlaptop is defined and inventory_hostname in groups.teacherlaptop)
 
 - name: Avoid suspending
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/systemd/sleep.conf.d/nosuspend.conf
     create: true
     block: |
@@ -119,21 +119,21 @@
   when: not (groups.teacherlaptop is defined and inventory_hostname in groups.teacherlaptop)
 
 - name: Deploy dolphin script
-  copy:
+  ansible.builtin.copy:
     src: lmn-fix-dolphin.sh
     dest: /usr/local/bin/
     mode: '0755'
 
 ################# general settings ##################
 - name: Enable boot splash screen
-  replace:
+  ansible.builtin.replace:
     dest: "/etc/default/grub"
     regexp: '"quiet"$'
     replace: '"quiet splash"'
   notify: Run update-grub
 
 - name: Protect editing grub menu entries
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/grub.d/40_custom
     block: |
       set superusers='root'
@@ -142,7 +142,7 @@
   notify: Run update-grub
 
 - name: Allow booting grub menu entries
-  lineinfile:
+  ansible.builtin.lineinfile:
     dest: /etc/grub.d/10_linux
     line: CLASS="${CLASS} --unrestricted"
     insertafter: '^CLASS=.*'
@@ -150,14 +150,14 @@
   notify: Run update-grub
 
 - name: Disable Grub submenus
-  lineinfile:
+  ansible.builtin.lineinfile:
     dest: /etc/default/grub
     line: 'GRUB_DISABLE_SUBMENU=true'
     insertafter: '^GRUB_TIMEOUT=.*'
   notify: Run update-grub
 
 - name: Grub timeout
-  lineinfile:
+  ansible.builtin.lineinfile:
     dest: /etc/default/grub
     regexp: '^(GRUB_TIMEOUT=).*'
     line: '\g<1>1'
@@ -165,8 +165,14 @@
   notify: Run update-grub
 
 - name: Keyboard compose key
-  lineinfile:
+  ansible.builtin.lineinfile:
     dest: /etc/default/keyboard
     regexp: '^(XKBOPTIONS=).*'
     line: '\1"compose:caps"'
     backrefs: yes
+
+- name: Default KDE filepicker
+  ansible.builtin.lineinfile:
+    path: /etc/environment.d/90lmn-filepicker.conf
+    create: true
+    line: GTK_USE_PORTAL=1