39 lines
917 B
YAML
39 lines
917 B
YAML
- name: Configure Fedora 42 Gnome Template
|
|
hosts: 127.0.0.1
|
|
connection: local
|
|
tasks:
|
|
- name: 'Baseline hardening'
|
|
ansible.builtin.include_role:
|
|
name: 'baseline'
|
|
vars:
|
|
umask_changes: true
|
|
manage_network: true
|
|
allow_ptrace: false
|
|
use_hardened_malloc: false
|
|
|
|
- name: 'Gnome package stuff'
|
|
ansible.builtin.include_role:
|
|
name: gnome
|
|
|
|
- name: 'Install trivalent'
|
|
ansible.builtin.include_role:
|
|
name: trivalent
|
|
|
|
- name: 'Setup arkenfox'
|
|
ansible.builtin.include_role:
|
|
name: arkenfox
|
|
vars:
|
|
enable_webgl: true
|
|
|
|
- name: 'Install wireguard-tools and neovim and mpv'
|
|
ansible.builtin.dnf5:
|
|
name:
|
|
- wireguard-tools
|
|
- neovim
|
|
- mpv
|
|
state: 'present'
|
|
|
|
- name: 'Handle SUID binaries'
|
|
ansible.builtin.script:
|
|
cmd: ./remove_suid.sh
|
|
|