62 lines
1.5 KiB
YAML
62 lines
1.5 KiB
YAML
- name: Perform system upgrades
|
|
apt:
|
|
update_cache: true
|
|
upgrade: dist
|
|
environment:
|
|
http_proxy: "{{ proxy.http_proxy }}"
|
|
HTTP_PROXY: "{{ proxy.http_proxy }}"
|
|
https_proxy: "{{ proxy.https_proxy }}"
|
|
HTTPS_PROXY: "{{ proxy.https_proxy }}"
|
|
no_proxy: "{{ proxy.no_proxy }}"
|
|
NO_PROXY: "{{ proxy.no_proxy }}"
|
|
|
|
- name: Install Cage window manager and Midori browser
|
|
apt:
|
|
update_cache: yes
|
|
name:
|
|
- cage
|
|
- xwayland
|
|
- gtk3-nocsd
|
|
- midori
|
|
#- chromium-browser
|
|
environment:
|
|
http_proxy: "{{ proxy.http_proxy }}"
|
|
HTTP_PROXY: "{{ proxy.http_proxy }}"
|
|
https_proxy: "{{ proxy.https_proxy }}"
|
|
HTTPS_PROXY: "{{ proxy.https_proxy }}"
|
|
no_proxy: "{{ proxy.no_proxy }}"
|
|
NO_PROXY: "{{ proxy.no_proxy }}"
|
|
|
|
- name: Configure proxy
|
|
blockinfile:
|
|
path: /etc/environment
|
|
block: |
|
|
http_proxy="{{ proxy.http_proxy }}"
|
|
HTTP_PROXY="{{ proxy.http_proxy }}"
|
|
https_proxy="{{ proxy.https_proxy }}"
|
|
HTTPS_PROXY="{{ proxy.https_proxy }}"
|
|
no_proxy="{{ proxy.no_proxy }}"
|
|
NO_PROXY="{{ proxy.no_proxy }}"
|
|
notify: Reboot
|
|
|
|
- name: Enable autologin
|
|
command: raspi-config nonint do_boot_behaviour B2
|
|
|
|
- name: Install kiosk script
|
|
template:
|
|
src: kiosk.sh.j2
|
|
dest: /etc/profile.d/kiosk.sh
|
|
notify: Reboot
|
|
|
|
# This help prevent sd card corruption over time
|
|
- name: Enable overlayfs
|
|
command: raspi-config nonint do_overlayfs 0
|
|
when: lockdown
|
|
notify: Reboot
|
|
|
|
- name: Turn off ssh server
|
|
service:
|
|
name: ssh
|
|
enabled: false
|
|
when: lockdown
|
|
notify: Reboot |