--- - name: Set disable_ipv6 parameters in the sysctl configuration file ansible.posix.sysctl: name: "{{ item }}" value: "1" reload: false loop: - net.ipv6.conf.all.disable_ipv6 - net.ipv6.conf.default.disable_ipv6 - net.ipv6.conf.lo.disable_ipv6 - net.ipv4.ip_forward notify: Reload the sysctl configuration - name: Enable NetworkManager service: name: NetworkManager state: started enabled: true - name: Enable ModemManager service: name: ModemManager state: started enabled: true - name: Start enable iptables service: name: iptables state: started enabled: true - name: Enable dnsmasq service: name: dnsmasq state: started enabled: true tags: dnsmasq - name: Get physical interfaces without LTE modem interface command: find /sys/class/net -type l -not -lname '*virtual*' -not -name '*wwp*' -printf '%f\n' register: without_lte changed_when: false check_mode: false tags: - dnsmasq - iptables - name: Get physical interfaces names WIFI modems command: find /sys/class/net -type l -lname '*wlp*' -printf '%f\n' register: wifi_int changed_when: false check_mode: false - name: Get physical interfaces names LTE modems command: find /sys/class/net -type l -lname '*wwp*' -printf '%f\n' register: lte_int changed_when: false check_mode: false - name: Configure dnsmasq template: src: dnsmasq.conf.j2 dest: /etc/dnsmasq.conf - name: Configure udiskie template: src: udisks2.conf.j2 dest: /etc/udisks2/udisks2.conf tags: dnsmasq - name: Configure udiskie service template: src: udiskie.service.j2 dest: /etc/systemd/system/udiskie.service notify: daemon-reload - name: Enable udiskie service: name: udiskie state: started enabled: true # - name: Configure NetworkManager # template: # src: NetworkManager.conf.j2 # dest: /etc/NetworkManager/NetworkManager.conf # notify: Reload NetworkManager - name: Run nmcli to check if wifi access point connection has already been added shell: /usr/bin/nmcli c | grep {{ wifi_ssid }} register: nmcli_result ignore_errors: True - name: Check result nmcli set_fact: nmcli_failed: "{{ nmcli_result.rc != 0 }}" - name: Run nmcli to check if Ethernet connection has already been added shell: /usr/bin/nmcli c | grep 'Ethernet' register: nmcli_result_eth ignore_errors: True - name: Check result nmcli eth set_fact: nmcli_eth_failed: "{{ nmcli_result_eth.rc != 0 }}" - name: Run nmcli to check if Ethernet connection has already been added shell: /usr/bin/nmcli c | grep 'LTE' register: nmcli_result_lte ignore_errors: True - name: Check result nmcli lte set_fact: nmcli_lte_failed: "{{ nmcli_result_lte.rc != 0 }}" - name: Run nmcli to check if bridge connection has already been added shell: /usr/bin/nmcli c | grep 'bridge' register: nmcli_result_bridge ignore_errors: True - name: Check result nmcli lte set_fact: nmcli_bridge_failed: "{{ nmcli_result_bridge.rc != 0 }}" - name: Run nmcli to add a connection LTE command: /usr/bin/nmcli c add ipv6.method disabled autoconnect yes save yes con-name {{ LTE_con_name }} ifname cdc-wdm0 type gsm apn "internet" tags: br when: nmcli_lte_failed - name: Configure bridge command: /usr/bin/nmcli c add type bridge ifname br0 autoconnect yes save yes con-name bridge stp no ipv6.method disabled ipv4.method manual ipv4.addr 10.1.10.1/24 tags: br when: nmcli_bridge_failed # - name: Configure bridge1 # command: /usr/bin/nmcli c add type ethernet slave-type bridge con-name 'Ethernet' ifname {{ int_name }} master br0 # loop: # - enp90s0 # loop_control: # loop_var: int_name # tags: br - name: Configure bridge1 command: /usr/bin/nmcli c add ipv6.method disabled type bridge-slave con-name 'Ethernet' ifname {{ int_name }} master br0 autoconnect yes save yes loop: - enp90s0 loop_control: loop_var: int_name when: nmcli_eth_failed # - name: set ip for bridge # command: /usr/bin/nmcli c mod bridge ipv4.addr {{ wifi_int_ip }}/24 ipv4.method manual # tags: br - name: Run nmcli to add a connection with the specified parameters as a wifi access point if above check has failed command: /usr/bin/nmcli c add ipv4.method shared autoconnect yes save yes con-name {{ wifi_ssid }} ifname {{ wifi_int.stdout }} \ type wifi \ slave-type bridge \ master br0 \ wifi.ssid {{ wifi_ssid }} \ 802-11-wireless.band a \ wifi.mode ap \ wifi-sec.proto rsn \ wifi-sec.pairwise ccmp \ wifi-sec.psk {{ wifi_psk }} \ wifi-sec.key-mgmt wpa-psk when: nmcli_failed # - name: Run nmcli to add WPA-PSK security to the wifi connection # command: /usr/bin/nmcli c mod {{ wifi_ssid }} \ # 802-11-wireless.band a \ # wifi.mode ap \ # wifi-sec.proto rsn \ # wifi-sec.pairwise ccmp \ # wifi-sec.psk {{ wifi_psk }} \ # wifi-sec.key-mgmt wpa-psk # - name: Run nmcli to add WPA-PSK security to the wifi connection # command: /usr/bin/nmcli c mod {{ wifi_ssid }} \ # 802-11-wireless.band bg \ # 802-11-wireless-security.key-mgmt wpa-psk \ # 802-11-wireless-security.proto rsn \ # 802-11-wireless-security.group ccmp \ # 802-11-wireless-security.pairwise ccmp \ # 802-11-wireless-security.psk {{ wifi_psk }} \ # - name: set ip for bridge # command: /usr/bin/nmcli c up bridge # tags: br # - name: Run nmcli to activate wifi access point connection # command: /usr/bin/nmcli c up {{ wifi_ssid }} # - name: Run nmcli to activate LTE access point connection # command: /usr/bin/nmcli c up {{ LTE_con_name }} # - name: Run nmcli to activate LTE access point connection # command: /usr/bin/nmcli c up Ethernet - name: Apply tags to tasks within included file include_tasks: iptables.yaml args: apply: tags: - iptables tags: - iptables - flush # - name: Configure {{ wifi_int.stdout_lines | first }} interface # template: # src: 25-wireless.network.j2 # dest: /etc/systemd/network/25-wireless.network # notify: Restart systemd-networkd # - name: Configure NetworkManager # template: # src: unmanaged.conf.j2 # dest: /etc/NetworkManager/conf.d/unmanaged.conf # notify: Restart NetworkManager # - name: Configure hostapd # template: # src: hostapd.conf.j2 # dest: /etc/hostapd/hostapd.conf # notify: Restart hostapd # - name: Configure hostapd # template: # src: dhcpd.conf.j2 # dest: /etc/dhcpd.conf # # notify: Restart dhcpd # - name: Enable services # service: "{{ app }}" # enabled: yes # loop: "{{ apps }}" # loop_control: # loop_var: "app" # - name: Force all notified handlers to run at this point # ansible.builtin.meta: flush_handlers