Initial import of work

roles/TODO/README.md

@@ -0,0 +1 @@
+Here be all the roles that I still need to develop, sorted by priorities.

roles/TODO/low-priority/fail2ban/main.yml

@@ -0,0 +1,8 @@
+- name: Install fail2ban
+  ansible.builtin.apt:
+    name:
+      - fail2ban
+    update_cache: true
+  become: true
+
+# TODO: figure out if you need to configure anything here

roles/TODO/low-priority/games/main.yml

@@ -0,0 +1,8 @@
+- name: Install some games
+  ansible.builtin.apt:
+    name:
+      - dosbox
+      - jumpnbump
+      - opentyrian
+    update_cache: true
+  become: true

roles/TODO/low-priority/generic-desktop/main.yml

@@ -0,0 +1,19 @@
+- name: Install the usual desktop utilities 
+  ansible.builtin.apt:
+    name:
+      - audacity
+      - firefox
+      - gimp
+      - libreoffice
+      - keepassxc
+      - task-slovenian
+      - task-slovenian-desktop
+      - thunderbird
+      - transmission
+      - yt-dlp
+    update_cache: true
+  become: true
+
+# TODO: figure out if you need to configure anything here
+#
+# TODO: install the printing system via cups

roles/TODO/low-priority/radeon-driver/main.yml

@@ -0,0 +1,6 @@
+- name: Install utilities for the Radeon graphics chips
+  ansible.builtin.apt:
+    name:
+      - radeontop
+    update_cache: true
+  become: true

roles/TODO/medium-priority/i3wm/main.yml

@@ -0,0 +1,25 @@
+- name: Install various packages related to i3wm
+  ansible.builtin.apt:
+    name:
+      - adapta-gtk-theme
+      - albatros-gtk-theme
+      - blackbird-gtk-theme
+      - clearlooks-phenix-theme
+      - darkblood-gtk-theme
+      - darkcold-gtk-theme
+      - darkfire-gtk-theme
+      - darkmint-gtk-theme
+      - flameshot
+      - materia-gtk-theme
+      - mupdf
+      - mupdf-tools
+      - parcellite
+      - pasystray
+      - rofi
+      - sakura
+    update_cache: true
+  become: true
+
+# TODO: figure out if you need to configure anything here
+#
+# TODO: install awesome fonts

roles/TODO/medium-priority/system-users/main.yml

@@ -0,0 +1,37 @@
+- name: Create a group of users that will be able to use sudo without typing in their passwords.
+  ansible.builtin.group:
+    name: sudo-nopassword
+  become: true
+
+- name: Grant the group to run commands with root privileges.
+  community.general.sudoers:
+    name: sudo-nopassword
+    group: sudo-nopassword
+    commands: ALL
+    nopassword: true
+  become: true
+
+- name: Create accounts for system users
+  ansible.builtin.user:
+    name: "{{ item.username }}"
+    comment: "{{ item.comment }}"
+    state: present
+    append: false
+  loop: "{{ shell_users }}"
+  become: true
+
+- name: Add a public SSH key to all of the user accounts for the devops people.
+  ansible.posix.authorized_key:
+    user: "{{ item.username }}"
+    key: "{{ item.public_ssh_key }}"
+  loop: "{{ shell_users }}"
+  become: true
+  ignore_errors: "{{ ansible_check_mode }}"
+
+- name: Remove all user accounts that have been revoked.
+  ansible.builtin.user:
+    name: "{{ item }}"
+    state: absent
+  loop: "{{ revoked_shell_users }}"
+  become: true
+

roles/TODO/medium-priority/system-utilities/main.yml

@@ -0,0 +1,46 @@
+- name: Install the etckeeer package separately from the rest of others
+  ansible.builtin.apt:
+    name:
+      - etckeeper
+    update_cache: true
+  become: true
+
+- name: Run the cron job for etckeeper (to store configuration changes)
+  ansible.builtin.shell:
+    cmd: bash -x /etc/cron.daily/etckeeper
+  become: true
+
+- name: Install various handy packages
+  ansible.builtin.apt:
+    name:
+      - gpm
+      - 7zip
+      - apt-show-versions
+      - apt-file
+      - apt-listbugs
+      - bash-completion
+      - debconf-utils
+      - jnettop
+      - jq
+      - lnav
+      - mailutils
+      - moreutils
+      - net-tools
+      - plocate
+      - powerline
+      - powerline-gitstatus
+      - pv
+      - socat
+      - sysstat
+      - dstat
+      - tig
+      - tree
+      - tshark
+      - unzip
+      - uuid
+      - iputils-ping
+      - iputils-tracepath
+      - nmap
+      - nmon
+    update_cache: true
+  become: true