reorganize

ansible/roles/borg/tasks/main.yml

@@ -0,0 +1,40 @@
+- name: Install Borg
+  apt:
+    pkg:
+      - borgbackup
+      - borgmatic
+
+- name: Copy Borgmatic script
+  template:
+    src: "{{ role_path }}/files/backup.yml"
+    dest: /root/backup.yml
+
+- name: Copy start_vms.sh
+  copy:
+    src: "{{ role_path }}/files/start_vms.sh"
+    dest: /root/start_vms.sh
+    mode: preserve
+
+- name: Copy stop_vms.sh
+  copy:
+    src: "{{ role_path }}/files/stop_vms.sh"
+    dest: /root/stop_vms.sh
+    mode: preserve
+
+- name: Copy systemd backup unit
+  copy:
+    src: "{{ role_path }}/files/backup.service"
+    dest: /etc/systemd/system/backup.service
+  notify: systemd daemon reload
+
+- name: Copy systemd backup timer
+  copy:
+    src: "{{ role_path }}/files/backup.timer"
+    dest: /etc/systemd/system/backup.timer
+  notify: systemd daemon reload
+
+- name: Enable backup timer
+  systemd:
+    name: backup.timer
+    enabled: true
+    state: started

ansible/roles/libvirt/tasks/main.yml

@@ -0,0 +1,17 @@
+- name: Start libvirtd
+  systemd:
+    name: libvirtd
+    enabled: true
+    state: started
+
+- name: Add root to libvirt group
+  user:
+    name: root
+    groups: libvirt
+    append: yes
+
+- name: Disable apparmor
+  systemd:
+    name: apparmor
+    enabled: false
+    state: stopped

ansible/roles/ssh/tasks/main.yml

@@ -29,47 +29,6 @@
     src: "{{ role_path }}/files/ssh_user_certificate.conf"
     dest: /etc/ssh/ssh_config.d/user_certificate.conf
 
-- name: Install Borg
-  apt:
-    pkg:
-      - borgbackup
-      - borgmatic
-
-- name: Copy Borgmatic script
-  template:
-    src: "{{ role_path }}/files/backup.yml"
-    dest: /root/backup.yml
-
-- name: Copy start_vms.sh
-  copy:
-    src: "{{ role_path }}/files/start_vms.sh"
-    dest: /root/start_vms.sh
-    mode: preserve
-
-- name: Copy stop_vms.sh
-  copy:
-    src: "{{ role_path }}/files/stop_vms.sh"
-    dest: /root/stop_vms.sh
-    mode: preserve
-
-- name: Copy systemd backup unit
-  copy:
-    src: "{{ role_path }}/files/backup.service"
-    dest: /etc/systemd/system/backup.service
-  notify: systemd daemon reload
-
-- name: Copy systemd backup timer
-  copy:
-    src: "{{ role_path }}/files/backup.timer"
-    dest: /etc/systemd/system/backup.timer
-  notify: systemd daemon reload
-
-- name: Enable backup timer
-  systemd:
-    name: backup.timer
-    enabled: true
-    state: started
-
 - name: Add SSH host CA known host
   known_hosts:
     key: '@cert-authority *.dmz ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAX2IhgHNxC6JTvLu9cej+iWuG+uJFMXn4AiRro9533x Host Certficate Authority for DMZ'