From 17aef4bb06427749ffad7a4b3754ba9a63dd9ccc Mon Sep 17 00:00:00 2001
From: mustard <sussybaka@homelab0ne.xyz>
Date: Mon, 15 Sep 2025 19:29:15 +0200
Subject: [PATCH] wip: adding trivalent policies

---
 .../policies/managed/managed_policies.json    |  5 +++++
 .../recommended/recommended_policies.json     |  5 +++++
 roles/trivalent/tasks/main.yaml               | 19 +++++++++++++++++--
 3 files changed, 27 insertions(+), 2 deletions(-)
 create mode 100644 roles/trivalent/files/etc/trivalent/policies/managed/managed_policies.json
 create mode 100644 roles/trivalent/files/etc/trivalent/policies/recommended/recommended_policies.json

diff --git a/roles/trivalent/files/etc/trivalent/policies/managed/managed_policies.json b/roles/trivalent/files/etc/trivalent/policies/managed/managed_policies.json
new file mode 100644
index 0000000..0b9bb59
--- /dev/null
+++ b/roles/trivalent/files/etc/trivalent/policies/managed/managed_policies.json
@@ -0,0 +1,5 @@
+{
+  "ExtensionInstallForcelist": [
+    "ddkjiahejlhfcafbddmgiahcphecmpfh"  
+  ]
+}
diff --git a/roles/trivalent/files/etc/trivalent/policies/recommended/recommended_policies.json b/roles/trivalent/files/etc/trivalent/policies/recommended/recommended_policies.json
new file mode 100644
index 0000000..219ff48
--- /dev/null
+++ b/roles/trivalent/files/etc/trivalent/policies/recommended/recommended_policies.json
@@ -0,0 +1,5 @@
+{
+  "DefaultSearchProviderEnabled": true,
+  "DefaultSearchProviderName": "No AI DuckDuckGo",
+  "DefaultSearchProviderURL": "https://noai.duckduckgo.com/?t=h_&q=%s&ia=web"
+}
diff --git a/roles/trivalent/tasks/main.yaml b/roles/trivalent/tasks/main.yaml
index 29b1894..9567fd6 100644
--- a/roles/trivalent/tasks/main.yaml
+++ b/roles/trivalent/tasks/main.yaml
@@ -7,10 +7,25 @@
 
 - name: Add pactl service
   ansible.builtin.copy:
-    src: 'etc/systemd/user/pactl.service'
-    dest: '/etc/systemd/user/pactl.service'
+    src: 'etc/systemd/system/pactl.service'
+    dest: '/etc/systemd/system/pactl.service'
     mode: '0644'
 
+- name: Enable pactl service
+  ansible.builtin.systemd_service:
+    name: 'pactl'
+    state: 'enabled'
+    daemon_reload: true
+
+- name: Set trivalent enterprise policies
+  ansible.builtin.copy:
+    src: '{{ item }}'
+    dest: '/{{ item }}'
+    mode: '0644'
+  loop:
+  - 'etc/trivalent/policies/recommended/recommended_policies.json'
+  - 'etc/trivalent/policies/managed/managed_policies.json'
+
 - name: Enable codecs and stuff
   shell: 'sudo dnf config-manager setopt fedora-cisco-openh264.enabled=1 rpmfusion-free.enabled=1 rpmfusion-free-updates.enabled=1 rpmfusion-nonfree.enabled=1 rpmfusion-nonfree-updates.enabled=1'