nm/roles/configure/tasks/main.yaml

---
- name: Set disable_ipv6 parameters in the sysctl configuration file
  ansible.posix.sysctl:
    name: "{{ item }}"
    value: "1"
    reload: false
  loop:
    - net.ipv6.conf.all.disable_ipv6
    - net.ipv6.conf.default.disable_ipv6
    - net.ipv6.conf.lo.disable_ipv6
    - net.ipv4.ip_forward
  notify: Reload the sysctl configuration

- name: Enable NetworkManager
  service: 
    name: NetworkManager
    state: started
    enabled: true

- name: Enable ModemManager
  service: 
    name: ModemManager
    state: started
    enabled: true

- name: Start enable iptables
  service: 
    name: iptables
    state: started
    enabled: true

- name: Disable dnsmasq
  service: 
    name: dnsmasq
    state: stopped
# Отключаем dnsmasq. NetworkManager запускает экземпляр dnsmasq
    enabled: false 
  tags: dnsmasq

- name: Get physical interfaces without LTE modem interface
  command: find /sys/class/net -type l -not -lname '*virtual*' -not -name '*wwp*' -printf '%f\n' 
  register: without_lte
  changed_when: false
  check_mode: false
  tags: 
  - dnsmasq
  - iptables


- name: Get physical interfaces names WIFI modems
  command: find /sys/class/net -type l -lname '*wlp*' -printf '%f\n' 
  register: wifi_int
  changed_when: false
  check_mode: false

- name: Get physical interfaces names LTE modems
  command: find /sys/class/net -type l -lname '*wwp*' -printf '%f\n' 
  register: lte_int
  changed_when: false
  check_mode: false

- name: Configure dnsmasq
  template:
    src: dnsmasq.conf.j2
    dest: /etc/dnsmasq.conf
  tags: dnsmasq

- name: Configure NetworkManager
  template:
    src: NetworkManager.conf.j2
    dest: /etc/NetworkManager/NetworkManager.conf
  notify: Reload NetworkManager

- name: Run nmcli to check if wifi access point connection has already been added
  shell: /usr/bin/nmcli c | grep {{ wifi_ssid }}
  register: nmcli_result
  ignore_errors: True

- name: Check result nmcli
  set_fact:
    nmcli_failed: "{{ nmcli_result.rc != 0 }}"

- name: Run nmcli to add a connection with the specified parameters as a wifi access point if above check has failed
  command: /usr/bin/nmcli c add autoconnect yes save yes con-name {{ wifi_ssid }} ifname {{ wifi_int.stdout }} type wifi ssid {{ wifi_ssid }} mode ap ip4 {{ wifi_int_ip }}
  when: nmcli_failed

- name: Run nmcli to add a connection LTE
  command: /usr/bin/nmcli c add autoconnect yes save yes con-name {{ LTE_con_name }} ifname cdc-wdm0 type gsm apn "internet"
  tags: br
- name: Configure bridge
  command: /usr/bin/nmcli c add type bridge ifname br0 autoconnect yes save yes con-name bridge
  tags: br
- name: Configure bridge1
  command: /usr/bin/nmcli c add type bridge-slave ifname {{ int_name }} master br0
  loop: 
  - wlp88s0
  - enp90s0
  loop_control: 
    label: int_name
  tags: br
- name: set ip for bridge
  command: /usr/bin/nmcli c mod bridge ipv4.addr {{ wifi_int_ip }}/24
  tags: br

- name: Run nmcli to add WPA-PSK security to the wifi connection
  command: /usr/bin/nmcli c mod {{ wifi_ssid }} \
    802-11-wireless.band bg \
    802-11-wireless.channel 1 \
    802-11-wireless-security.key-mgmt wpa-psk \
    802-11-wireless-security.proto rsn \
    802-11-wireless-security.group ccmp \
    802-11-wireless-security.pairwise ccmp \
    802-11-wireless-security.psk {{ wifi_psk }} \
    ipv4.method shared \

- name: Run nmcli to activate wifi access point connection
  command: /usr/bin/nmcli c up {{ wifi_ssid }}

- name: Run nmcli to activate LTE access point connection
  command: /usr/bin/nmcli c up {{ LTE_con_name }}

- name: Apply tags to tasks within included file
  include_tasks: iptables.yaml
  args:
    apply:
      tags:
        - iptables
  tags:
    - iptables
    - flush



# - name: Configure {{ wifi_int.stdout_lines | first }} interface
#   template:
#     src: 25-wireless.network.j2
#     dest: /etc/systemd/network/25-wireless.network
#   notify: Restart systemd-networkd

# - name: Configure NetworkManager
#   template:
#     src: unmanaged.conf.j2
#     dest: /etc/NetworkManager/conf.d/unmanaged.conf
#   notify: Restart NetworkManager

# - name: Configure hostapd
#   template:
#     src: hostapd.conf.j2
#     dest: /etc/hostapd/hostapd.conf
#   notify: Restart hostapd

# - name: Configure hostapd
#   template:
#     src: dhcpd.conf.j2
#     dest: /etc/dhcpd.conf
# #  notify: Restart dhcpd

# - name: Enable services
#   service: "{{ app }}"
#   enabled: yes
#   loop: "{{ apps }}"
#   loop_control:
#     loop_var: "app"
# - name: Force all notified handlers to run at this point
#   ansible.builtin.meta: flush_handlers