f1cb7486a5
- Separate `lmn_vpn` from `lmn_teacherlaptop`. - Implement a check for the availability of the wireguard-server during the wg-config rollout. - Enhance variable support with a standardized naming schema: - VPN selection via `vpn` variable (`none`, `wg`). - Wireguard configuration (endpoint, allowed IPs, ip_cdr, dns, searchpath). - Run wg-config role in separate play with serial 1 to avoid conflicts, when the role attempts to determine the next free Wireguard IP on the server when role try to Add a check to verify if the radius certificate is revoked. - Ensure required packages and services are only installed and configured if the `vpn` variable is set. - Provide documentation for `lmn_vpn` module.
28 lines
771 B
YAML
28 lines
771 B
YAML
---
|
|
- name: Install additional teacherlaptop packages
|
|
ansible.builtin.apt:
|
|
name:
|
|
- plasma-discover
|
|
- nextcloud-desktop
|
|
- dolphin-nextcloud
|
|
# - krb5-auth-dialog
|
|
state: latest # noqa package-latest
|
|
|
|
- name: Copy polkit rule to allow install packages by role-teacher
|
|
ansible.builtin.copy:
|
|
src: "{{ item }}"
|
|
dest: /etc/polkit-1/rules.d/
|
|
mode: "0644"
|
|
loop:
|
|
- lmn-packagekit.rules
|
|
- lmn-networkmanager.rules
|
|
|
|
- name: Deploy sudo configurations (apt for role-teacher)
|
|
ansible.builtin.copy:
|
|
dest: /etc/sudoers.d/90-lmn-teacherlaptop
|
|
owner: root
|
|
group: root
|
|
mode: '0700'
|
|
content: |
|
|
%role-teacher ALL=(root) NOPASSWD: /usr/bin/apt
|
|
%role-teacher ALL=(root) NOPASSWD: /usr/sbin/cryptsetup
|