---

# Defining the remote server where the package will be deployed

- hosts: test

  remote_user: root

  become: yes

  become_method: sudo

  vars:

#    domain: '{{ domain.name }}'

    batman: 2021.4

  tasks:

# edit sources.list

#    - name: add the correct dkms source 

#      blockinfile:

#        path: /etc/apt/sources.list

#        backup: yes

#        block: |

#          # backports

#          deb http://deb.debian.org/debian bullseye-backports main

# Installing the sudo, git, vim and python3 packadges on ther servers 

    - name: Install a list of packages

      apt:

        pkg:

        - git

        - bridge-utils

        - ntp

        - dnsmasq

        - iptables-persistent

        - openvpn

        - fastd

        - build-essential

        - pkg-config

        - checkinstall

        - libnl-3-dev

        - libnl-genl-3-dev

        - linux-headers-amd64 

        - dkms

        - lsb-release

        - ethtool

        - python3

# Updating all packages to their latest version

    - name: Update all packages to their latest version

      apt:

        name: "*"

        state: latest

# Reboot and reconnect

    - name: Reboot host and wait for it to restart

      reboot:

        msg: "Reboot initiated by Ansible"

        connect_timeout: 5

        reboot_timeout: 600

        pre_reboot_delay: 0

        post_reboot_delay: 30

        test_command: whoami

# edit routing tables

    - name: add the routing table ports for freifunk 

      blockinfile:

        path: /etc/iproute2/rt_tables

        backup: yes

        block: |

          # freifunk

          33      lux

          42      icvpn

          100     vpn

# edit rsysctl config

    - name: add the freifunk settings to sysctl config

      blockinfile:

        path: /etc/sysctl.conf

        backup: yes

        block: |

          # Freifunk specific settings

          net.ipv4.ip_forward=1

          net.bridge.bridge-nf-call-arptables = 0

          net.bridge.bridge-nf-call-ip6tables = 0

          net.bridge.bridge-nf-call-iptables = 0

          net.ipv6.conf.all.forwarding=1

          net.ipv6.conf.all.autoconf = 1

          net.ipv6.conf.default.autoconf = 0

          net.ipv6.conf.eth0.autoconf = 1

          net.ipv6.conf.all.accept_ra = 1

          net.ipv6.conf.default.accept_ra = 0

          net.ipv6.conf.eth0.accept_ra = 1

          net.ipv4.conf.default.rp_filter = 2

# load kernel module

    - name: Load kernel module

      become: true

      become_user: root

      shell: modprobe br_netfilter

# edit the module list

    - name: add nf conntrack to modules

      blockinfile:

        path: /etc/modules

        backup: yes

        block: |

          nf_conntrack

# reload sysctl config

    - name: Reload sysctl config

      become: true

      become_user: root

      shell: sysctl -p /etc/sysctl.conf

# Reboot and reconnect

    - name: Reboot host and wait for it to restart

      reboot:

        msg: "Reboot initiated by Ansible"

        connect_timeout: 5

        reboot_timeout: 600

        pre_reboot_delay: 0

        post_reboot_delay: 30

        test_command: whoami

# create the Freifunk bridge interface file

# copy default interface file to remote host 

    - name: Copy interface file with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/interface/freifunk

        dest: /etc/network/interfaces.d/freifunk

        owner: root

        group: root

        mode: '0644'

# create IPV4 Iptables rules

# copy default IPV4 iptables rules file to remote host 

    - name: Copy rulesv4 file with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/iptables/rules.v4

        dest: /etc/iptables/rules.v4

        owner: root

        group: root

        mode: '0644'

# create dnsmasq file

# copy default dnsmasq file to remote host 

    - name: Copy dnsmasq file with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/dnsmasq/fflux

        dest: /etc/dnsmasq.d/fflux

        owner: root

        group: root

        mode: '0644'

# Create directory fflux in fatsd

    - name: Create the directory fflux in fastd if it does not exist

      ansible.builtin.file:

        path: /etc/fastd/fflux

        state: directory

        mode: '0755'

# create fastd config file

# copy default dnsmasq file to remote host 

    - name: Copy fastd config file with owner and permissions

      ansible.builtin.copy:

        src: /home/fflux/Infrastructure-Intern/server_config/fastd/fastd.conf

        dest: /etc/fastd/fflux/fastd.conf

        owner: root

        group: root

        mode: '0644'

# Create directory  peers-gw in fatsd

    - name: Create the directory peers-gw in fastd/fflux if it does not exist

      ansible.builtin.file: