exam-laptop/playbook.yml

---
- name: ensure safe environment for exams
  hosts: localhost
  vars:
    - pruefungsuser: "pruefling"
    - pruefungsgruppe: "prueflinge"
    - pruefungspasswort: "pruefung"
  environment:
    PATH: "/sbin:{{ ansible_env.PATH }}"


# to verify ufw configuration run:
# sudo ufw status verbose
  roles:
    - role: pruefungsuser
    - role: libreoffice
    - role: ufw

  tasks:

    - name: disable mounting of usb flash drives
      file:
        path: /media
        owner: root
        mode: '700' 

 

    - name: Set timezone to Europe/Vienna
      timezone:
        name: Europe/Vienna


    - name: purge some prior installed packages
      apt: 
        name: 
          - task-kde-desktop
          - task-german-kde-desktop
          - task-german-desktop
          - xdg-desktop-portal-kde
          - xdg-desktop-portal-wlr
          - akonadi-backend-sqlite
          - thunderbird-l10n-de
          - webext-privacy-badger
          - webext-ublock-origin-firefox
          - webext-ublock-origin-chromium
          - vlc
          - gimp
          - inkscape
          - flameshot
          - bluefish
          - nmap
          - net-tools
          - ghex
          - thonny
          - spyder
          - mu-editor
          - dia
          - vym
          - tree
          - sqlite3
          - kicad
          - kicad-doc-de
          - akonadi-backend-mysql
          - akonadi-contacts-data
          - akonadi-mime-data
          - akonadi-server
          - akregator
          - aspell
          - aspell-de
          - dolphin
          - firebird3.0-common
          - gimp-data
          - gwenview
          - hyphen-en-us
          - ingerman
          - ispell
          - kate
          - kcalc
          - kmail
          - knotes
          - korganizer
          - wamerican
          - dragonplayer
          - juk
        autoremove: yes
        state: absent
    - name: intall some prior installed packages
      apt: 
        name: 
          - curl
        state: latest

    - name: Enable ufw
      ufw: state=enabled

    - name: start ufw service
      service: 
        name: ufw
        state: restarted