diff --git a/roles/qubes-f41-gnome/tasks/main.yaml b/roles/qubes-f41-gnome/tasks/main.yaml index 681e6c1..6053f54 100644 --- a/roles/qubes-f41-gnome/tasks/main.yaml +++ b/roles/qubes-f41-gnome/tasks/main.yaml @@ -39,13 +39,13 @@ - name: Harden SSH, add kernel blacklist and hardening ansible.builtin.copy: - src: '..{{ item }}' - dest: '{{ item }}' + src: '{{ item }}' + dest: '/{{ item }}' mode: '0644' loop: - - '/etc/ssh/ssh_config.d/10-custom.conf' - - '/etc/modprobe.d/workstation-blacklist.conf' - - '/etc/sysctl.d/99-workstation.conf' + - 'etc/ssh/ssh_config.d/10-custom.conf' + - 'etc/modprobe.d/workstation-blacklist.conf' + - 'etc/sysctl.d/99-workstation.conf' - name: Reload sysctl @@ -69,34 +69,34 @@ - name: Copy dconf files + xdg-desktop-portals fix + Network manager ansible.builtin.copy: - src: '..{{ item }}' - dest: '{{ item }}' + src: '{{ item }}' + dest: '/{{ item }}' mode: '0644' loop: - - '/etc/security/limits.d/30-disable-coredump.conf' - - '/etc/systemd/coredump.conf.d/disable.conf' - - '/etc/dconf/db/local.d/locks/automount-disable' - - '/etc/dconf/db/local.d/locks/privacy' - - '/etc/dconf/db/local.d/adw-gtk3-dark' - - '/etc/dconf/db/local.d/automount-disable' - - '/etc/dconf/db/local.d/prefer-dark' - - '/etc/dconf/db/local.d/privacy' - - '/etc/xdg-desktop-portal/portals.conf' - - '/etc/systemd/system/NetworkManager.service.d/99-brace.conf' + - 'etc/security/limits.d/30-disable-coredump.conf' + - 'etc/systemd/coredump.conf.d/disable.conf' + - 'etc/dconf/db/local.d/locks/automount-disable' + - 'etc/dconf/db/local.d/locks/privacy' + - 'etc/dconf/db/local.d/adw-gtk3-dark' + - 'etc/dconf/db/local.d/automount-disable' + - 'etc/dconf/db/local.d/prefer-dark' + - 'etc/dconf/db/local.d/privacy' + - 'etc/xdg-desktop-portal/portals.conf' + - 'etc/systemd/system/NetworkManager.service.d/99-brace.conf' - name: Update dconf shell: sudo dconf update - name: Setup ZRAM, flatpak updater and environment variables to disable GJS, WebkitGTK JIT, and fix GNOME env variable ansible.builtin.copy: - src: '..{{ item }}' + src: '{{ item }}' dest: '{{ item }}' mode: '0600' loop: - - '/etc/systemd/zram-generator.conf' - - '/etc/systemd/user/update-user-flatpaks.service' - - '/etc/systemd/user/update-user-flatpaks.timer' - - '/etc/environment' + - 'etc/systemd/zram-generator.conf' + - 'etc/systemd/user/update-user-flatpaks.service' + - 'etc/systemd/user/update-user-flatpaks.timer' + - 'etc/environment' - name: Upgrade all packages ansible.builtin.dnf5: