# create IPV4 Iptables rules

# copy default IPV4 iptables rules file to remote host 

    - name: Copy rulesv4 file with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/iptables/rules.v4

        dest: /etc/iptables/rules.v4

        owner: root

        group: root

        mode: '0644'

# create dnsmasq file

# copy default dnsmasq file to remote host 

    - name: Copy dnsmasq file with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/dnsmasq/fflux

        dest: /etc/dnsmasq.d/fflux

        owner: root

        group: root

        mode: '0644'

# Create directory fflux in fatsd

    - name: Create the directory fflux in fastd if it does not exist

      ansible.builtin.file:

        path: /etc/fastd/fflux

        state: directory

        mode: '0755'

# create fastd config file

# copy default dnsmasq file to remote host 

    - name: Copy fastd config file with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/fastd/fastd.conf

        dest: /etc/fastd/fflux/fastd.conf

        owner: root

        group: root

        mode: '0644'

# Create directory  peers-gw in fatsd

    - name: Create the directory peers-gw in fastd/fflux if it does not exist

      ansible.builtin.file:

        path: /etc/fastd/fflux/peers-gw

        state: directory

        mode: '0755'

# create fastd blacklist script

# copy fastd blacklist script to remote host 

    - name: Copy fastd blacklist script with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/scripts/fastd-blacklist.sh

        dest: /etc/fastd/fflux/fastd-blacklist.sh

        owner: root

        group: root

        mode: '0755'

# change fasts autostart to all

# copy default fastd default file to remote host 

    - name: Copy fastd config file with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/fastd/fastd

        dest: /etc/default/fastd

        owner: root

        group: root

        mode: '0644'

# Remove client directory from openvpn

    - name: Remove client directory

      ansible.builtin.file:

        path: /etc/openvpn/client

        state: absent

# Remove server from openvpn

    - name: Remove server directory

      ansible.builtin.file:

        path: /etc/openvpn/server

        state: absent

# create hideme config

# copy the default hidme config to remote host 

    - name: Copy hideme config with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/openvpn/hideme.conf

        dest: /etc/openvpn/hideme.conf

        owner: root

        group: root

        mode: '0644'

# create hideme-up script

# copy hideme-up script to remote host 

    - name: Copy hideme-up script with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/scripts/hideme-up

        dest: /etc/openvpn/hideme-up

        owner: root

        group: root

        mode: '0755'

# create update resolv conf

# copy update-resolv.conf script to remote host 

    - name: Copy update-resolv.conf with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/openvpn/update-resolv-conf

        dest: /etc/openvpn/update-resolv-conf

        owner: root

        group: root

        mode: '0755'

# Create for batman installation

    - name: Create directory for batman installation

      ansible.builtin.file:

        path: /usr/src/batman-adv-{{batman}}

        state: directory

        mode: '0755'

# Clone and check out batman repo

    - name: Clone and check out batman git repo

      ansible.builtin.git:

        repo: 'https://git.open-mesh.org/batman-adv.git'

        dest: /usr/src/batman-adv-{{batman}}

        version: v{{batman}}

# create dkms conf

# copy dkms conf to remote host 

    - name: Copy dkms.conf with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/dkms/dkms.conf

        dest: /usr/src/batman-adv-{{batman}}

        owner: root

        group: root

        mode: '0644'

# create dkms install script

# copy dkms install script to remote host 

    - name: Copy dkms install script with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/scripts/install_dkms.sh

        dest: /usr/local/bin

        owner: root

        group: root

        mode: '0744'

# create build batclt script

# copy build batctl script to remote host 

    - name: Copy build batctl script with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/scripts/build_batctl.sh

        dest: /usr/local/bin

        owner: root

        group: root

        mode: '0744'

# Run batman scripts

    - name: Run install_dkms.sh

      command: bash /usr/local/bin/install_dkms.sh

    - name: Run build_batctl.sh                    

      command: /usr/local/bin/build_batctl.sh 

# edit the module list

    - name: add batman-adv to modules

      blockinfile:

        path: /etc/modules

        backup: yes

        block: |

          nf_conntrack

          batman-adv

    - name: Creating a file with content

      copy:

        dest: "/etc/modules-load.d/freifunk.conf"

        content: |

          ebtables

          batman_adv

# Reboot and reconnect

    - name: Reboot host and wait for it to restart

      reboot:

        msg: "Reboot initiated by Ansible"

        connect_timeout: 5

        reboot_timeout: 600

        pre_reboot_delay: 0

        post_reboot_delay: 30

        test_command: whoami

# create check gateway script

# copy check gateway script to remote host 

    - name: Copy check gateway script with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/scripts/check_gateway.sh

        dest: /usr/local/bin

        owner: root

        group: root

        mode: '0755'