- name: Configure Fedora 42 Gnome Template
  hosts: 127.0.0.1
  connection: local
  tasks:
    - name: 'Baseline hardening'
      ansible.builtin.include_role:
        name: 'baseline'
      vars:
        umask_changes: true
        manage_network: true
        allow_ptrace: false 
        use_hardened_malloc: false

    - name: 'Gnome package stuff'
      ansible.builtin.include_role:
        name: gnome

    - name: 'Install trivalent'
      ansible.builtin.include_role:
        name: trivalent

    - name: 'Setup arkenfox'
      ansible.builtin.include_role:
        name: arkenfox
      vars:
        enable_webgl: true

    - name: 'Install wireguard-tools and neovim and mpv'
      ansible.builtin.dnf5:
        name:
          - wireguard-tools
          - neovim
          - mpv
        state: 'present'
  
    - name: 'Handle SUID binaries'
      ansible.builtin.script:
        cmd: ./remove_suid.sh