add wireguard config for jefke

other updates

ansible.cfg

@@ -1,5 +1,5 @@
 [defaults]
-roles_path=~/.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles:roles
+roles_path=roles:~/.ansible/roles:/usr/share/ansible/roles:/etc/ansible/roles
 inventory=inventory
 playbook_dir=playbooks
 vault_password_file=util/secret-service-client.sh

roles/keepassxc/files/keepassxc.ini

@@ -6,10 +6,11 @@ CustomProxyLocation=
 Enabled=true
 
 [FdoSecrets]
-Enabled=true
 -NoConfirmDeleteItem=true
+Enabled=true
 
 [GUI]
+AdvancedSettings=true
 MinimizeOnClose=true
 MinimizeOnStartup=true
 ShowTrayIcon=true
@@ -27,6 +28,7 @@ AdvancedMode=false
 ExcludedChars=
 Length=40
 SpecialChars=false
+Type=0
 UpperCase=true
 
 [SSHAgent]

roles/neovim/tasks/main.yml

@@ -63,6 +63,7 @@
     section: "Default Applications"
     option: "{{ item }}"
     value: "nvim.desktop"
+    no_extra_spaces: true
   loop: "{{ default_apps }}"
 - name: Copy neovim.bashrc
   copy:

roles/system/files/ssh_config

@@ -1,8 +1,8 @@
 AddKeysToAgent  yes
 
 Host brussels
-        HostName brussels.studlab.os3.nl
-        User pkunis
+        HostName 145.100.104.43
+        User root
 
 Host github.com
         HostName github.com
@@ -10,14 +10,21 @@ Host github.com
         IdentitiesOnly yes
 
 Host max
-        HostName max.lan
+        HostName max.dmz
         User root
 
 Host lewis
-        HostName lewis.lan
+        HostName lewis.hyp
         User root
 
-Host forgejo
-        HostName git.pim.kunis.nl
-        Port 56287
-        User git
+Host hermes
+        HostName hermes.dmz
+        User root
+
+Host atlas
+        HostName atlas.hyp
+        User root
+
+# Default user
+Host *
+    User root

roles/system/tasks/main.yml

@@ -18,6 +18,7 @@
       - vim
       - telegram-desktop
       - wget
+      - vlc
 - name: Install .gitconfig
   template:
     src: "{{ role_path }}/templates/.gitconfig.j2"

roles/wireguard/vars/main.yml

@@ -25,7 +25,7 @@ wireguard_interfaces:
     always: true
     address: "10.42.0.2/32"
     peer_public_key: "NLI4IsIgb4if2FhP8BXJupTlC/guZfY4tG91dZ4t8jE="
-    endpoint: "atlas.lan:51820"
+    endpoint: "atlas.hyp:51820"
     allowed_ips: "10.42.0.1/32"
     private_key: !vault |
       $ANSIBLE_VAULT;1.1;AES256
@@ -35,3 +35,17 @@ wireguard_interfaces:
       3162366232656534630a636639626134343638316665306362396363363034616163616662326136
       62363632393536356562306562366431383962646330353035323137613865333636356663363763
       6137333432336533646534656437633539633065663931643633
+  - name: jefke
+    always: true
+    address: "10.42.1.2/32"
+    peer_public_key: "IzTDzZGPKlGyVjW8MKyP0aFpVZ6Ul/o5fJJZ3pQKGFc="
+    endpoint: "jefke.hyp:51820"
+    allowed_ips: "10.42.1.1/32"
+    private_key: !vault |
+      $ANSIBLE_VAULT;1.1;AES256
+      39396361643039633361303266326166376236626430336534303330373766303063373839643031
+      6561323836616535323931643335313438306338396264360a653830353237396665373436316466
+      35353063646263353163303836383762313034653563663634613139303136323739626334313232
+      3162366232656534630a636639626134343638316665306362396363363034616163616662326136
+      62363632393536356562306562366431383962646330353035323137613865333636356663363763
+      6137333432336533646534656437633539633065663931643633