X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=roles%2Fgnupg%2Ftasks%2Fmain.yml;h=117ebf208b5f8366c38589f1500cdf11b914c492;hb=587b6dd6d2d3a63ad28455003c0c2c5f58afdecb;hp=2bd1c79ad7e0cfd8ded167909214c8acc4f33bc9;hpb=e7c9bf715db5255074b6f7554a60de263cc3aa96;p=perso%2FImmae%2FConfig%2FAnsible.git diff --git a/roles/gnupg/tasks/main.yml b/roles/gnupg/tasks/main.yml index 2bd1c79..117ebf2 100644 --- a/roles/gnupg/tasks/main.yml +++ b/roles/gnupg/tasks/main.yml @@ -1,16 +1,22 @@ --- -- name: Config files - synchronize: - recursive: yes - archive: no - checksum: yes - src: gnupg - dest: /$XDG_CONFIG_HOME/ -- name: Protect directory +- name: Config dirs file: - path: $XDG_CONFIG_HOME/gnupg state: directory + path: "$XDG_CONFIG_HOME/{{ gnupg_config_item }}" mode: 0700 + loop: + - gnupg + loop_control: + loop_var: gnupg_config_item +- name: Config files + copy: + src: "gnupg/{{ gnupg_config_item }}" + dest: "$XDG_CONFIG_HOME/gnupg/{{ gnupg_config_item }}" + loop: + - gpg-agent.conf + - gpg.conf + loop_control: + loop_var: gnupg_config_item - name: Get gnupg runtime folder name shell: 'gpgconf --list-dirs socketdir | sed -e "s@$XDG_RUNTIME_DIR/gnupg/@@"' register: gnupg_runtime_dir_cmd @@ -63,6 +69,7 @@ - notify add key to immae@immae.eu - send key to immae@immae.eu - notify add key to password store +- meta: flush_handlers - name: add keygrip to sshcontrol lineinfile: line: "{{ keygrip.stdout }}" @@ -73,12 +80,13 @@ when: keygrip is defined and "stdout" in keygrip and keygrip.stdout != "" notify: - restart gpg-agent +- meta: flush_handlers - name: Override the gpg socket directory block: - name: Add systemd overrides template: - src: "systemd/{{ item }}.conf.j2" - dest: "$XDG_CONFIG_HOME/systemd/user/{{ item }}.socket.d/override.conf" + src: "systemd/{{ systemd_item }}.conf.j2" + dest: "$XDG_CONFIG_HOME/systemd/user/{{ systemd_item }}.socket.d/override.conf" register: results loop: - dirmngr @@ -86,10 +94,14 @@ - gpg-agent-browser - gpg-agent-extra - gpg-agent-ssh + loop_control: + loop_var: systemd_item - name: Restart systemd units systemd: daemon_reload: true scope: user state: restarted - name: "{{ item }}.socket" + name: "{{ restart_systemd_item }}.socket" loop: "{{ results.results|selectattr('changed')|map(attribute='item')|list }}" + loop_control: + loop_var: restart_systemd_item