ansible-playbooks/development.yaml

- name: Configure Fedora 42 Gnome Template for development
  hosts: 127.0.0.1
  connection: local
  tasks:
    - name: 'Baseline hardening'
      ansible.builtin.include_role:
        name: 'baseline'
      vars:
        umask_changes: false
        manage_network: true

    - name: 'Gnome package stuff'
      ansible.builtin.include_role:
        name: gnome

 #   - name: 'Setup dom0 prompt for sudo'
 #     ansible.builtin.include_role:
 #       name: sudo-dom0-prompt

    - name: 'Install trivalent'
      ansible.builtin.include_role:
        name: trivalent

#    - name: 'Setup arkenfox'
#      ansible.builtin.include_role:
#        name: arkenfox

    - name: 'Import VSCodium repo key'
      ansible.builtin.rpm_key:
        state: 'present'
        key: 'https://gitlab.com/paulcarroty/vscodium-deb-rpm-repo/-/raw/master/pub.gpg'

    - name: 'Import VSCodium repo'
      ansible.builtin.copy:
        src: 'etc/yum.repos.d/vscodium.repo'
        dest:  '/etc/yum.repos.d/vscodium.repo'

    - name: 'Setup docker repo'
      shell: 'sudo dnf config-manager addrepo --from-repofile=https://download.docker.com/linux/fedora/docker-ce.repo -y'

    - name: 'Install vscode and docker'
      ansible.builtin.dnf5:
        name:
          - codium
  #        - docker-ce
  #        - docker-buildx-plugin
  #        - docker-compose-plugin
        state: 'present'

 #   - name: 'Enable docker service'
 #     ansible.builtin.systemd:
 #       name: 'docker'
 #       enabled: true
 #       state: 'started'

#    - name: Add user to Docker group
#      user:
#        name: user
#        group: docker
#        append: yes

    - name: Create Qubes bind dirs directory
      file:
        path: /etc/qubes-bind-dirs.d
        state: directory
        mode: '0755'

    - name: Configure Qubes bind dirs
      lineinfile:
        path: /etc/qubes-bind-dirs.d/50_user.conf
        line: 'binds+=( "/var/lib/docker" )'
        state: present
        create: yes

    - name: 'Install wireguard-tools'
      ansible.builtin.dnf5:
        name:
          - wireguard-tools
          - make
          - ccache
          - binwalk
          - qemu-system-mipsel
          - hx
          - neovim
        state: 'present'