update

ansible/roles/packages/vars/Pop!_OS-24.04.yml

@@ -1,27 +1,8 @@
 install_homebrew_if_missing: true
 
 required_packages_brew:
-  #- lazygit
-  #- glab
-  #- oh-my-posh
-  #- tpm
-  #- kubernetes-cli
   - zsh-autosuggestions
-  #- bitwarden-cli
-  #- ttyd
-  #- fastfetch
-  #- vivid
-  #- yazi
   - zsh-history-substring-search
-  #- opentofu
-  #- helm
-  #- bat
-  #- neovim
-  #- eza
-  #- zoxide
-  #- ansible
-  #- ffmpeg
-  #- k9s
   - helm
 
 required_packages_apt:
@@ -44,26 +25,8 @@ required_packages_apt:
   - yubikey-personalization 
   - yubikey-manager
   - distrobox
-  #- htop
-  #- curl
-  #- xsel
-  #- wl-clipboard  
-  #- podman
-  #- wget
-  #- apt-transport-https
-  #- software-properties-common
-  #- python3 
-  #- python3-pip 
-  #- libvirt-clients 
-  #- libvirt-daemon-system 
-  #- bridge-utils 
-  #- virtinst 
-  #- vlc
-  #- vault
-  #- fzf
-  #- ripgrep
-  #- libsecret-tools
-  #- rclone
+  - unattended-upgrades
+  - timeshift
 
 #apt_keys:
 #  - https://packages.microsoft.com/keys/microsoft.asc
@@ -74,7 +37,7 @@ required_packages_apt:
 #  - {name: "hashicorp-archive-keyring", url: "https://apt.releases.hashicorp.com/gpg"}
 
 flatpak_remote:
-  - {name: 'flathub', url: "https://dl.flathub.org/repo/flathub.flatpakrepo"}
+  - {name: 'flathub', url: "https://dl.flathub.org/repo/flathub.flatpakrepo", method: "user"}
 
 required_packages_flatpak:
   - me.proton.Mail
@@ -83,19 +46,14 @@ required_packages_flatpak:
   - com.github.tchx84.Flatseal
   - com.vscodium.codium
   - org.chromium.Chromium
-  - org.libreoffice.LibreOffice
   - com.parsecgaming.parsec
   - org.videolan.VLC
   - fr.handbrake.ghb
   - com.spotify.Client
   - org.signal.Signal
   - com.yubico.yubioath
-  - org.gnome.Calculator
   - io.gitlab.librewolf-community
-
-#go_version_target: "go version go1.23.4 linux/amd64"
-#go_tarball: "go1.23.5.linux-amd64.tar.gz"
-#go_checksum: "sha256:cbcad4a6482107c7c7926df1608106c189417163428200ce357695cc7e01d091"
+  - com.brave.Browser
 
 go_apps:
   - github.com/charmbracelet/vhs@latest

ansible/roles/security/tasks/defaults.yml

@@ -0,0 +1,20 @@
+- name: Configure Security Auto Updates
+  shell:
+    cmd: dpkg-reconfigure -p medium unattended-upgrades
+  become: yes
+  when: ansible_facts["os_family"] == 'Debian'
+
+- name: Check if UFW is installed
+  command: ufw version
+  register: ufw_version
+  ignore_errors: true
+  changed_when: false
+
+- name: Configure UFW
+  shell:
+    cmd: |
+      ufw enable
+      ufw default deny incoming
+      ufw default allow outgoing
+  become: yes
+  when: ufw_version.rc == 0

ansible/roles/security/tasks/main.yml

@@ -0,0 +1,11 @@
+- name: Load a variable file
+  include_vars: "{{ item }}"
+  with_first_found:
+  - "vars/{{ ansible_distribution }}-{{ ansible_distribution_version }}.yml"
+  - "vars/{{ ansible_distribution }}.yml"
+  - "vars/{{ ansible_os_family }}.yml"
+  - "vars/defaults.yml"
+
+- name: "load tasks"
+  include_tasks: "defaults.yml"
+

ansible/roles/update/tasks/main.yml

@@ -1,13 +1,15 @@
-#- name: Update Pacman
-#  community.general.pacman:
-#    update_cache: true
-#    upgrade: true
+- name: Update Pacman
+  community.general.pacman:
+    update_cache: true
+    upgrade: true
+  when: ansible_facts["os_family"] == 'Archlinux'
 
 - name: Upgrade Packages
   package:
     update_cache: yes
     upgrade: safe 
   become: yes
+  when: ansible_facts["os_family"] == 'Debian'
 
 - name: Update Nix Packages
   become_user: user

ansible/scripts/install_flatpak.yml

@@ -3,7 +3,7 @@
     name: "{{ item.name }}"
     state: present
     flatpakrepo_url: "{{ item.url }}"
-    method: user
+    method: "{{ item.method }}"
   with_items:  "{{ flatpak_remote }}"      
   when: flatpak_remote is defined   
 
@@ -17,6 +17,8 @@
   become_user: user
   community.general.flatpak:
     name: "{{ item }}"
+    method: user
+    state: latest
   with_items:  "{{ required_packages_flatpak }}"     
   when: required_packages_flatpak is defined   
   ignore_errors: yes

ansible/security.yml

@@ -0,0 +1,5 @@
+- hosts: localhost
+  connection: local
+  become: true
+  roles:
+    - security