Use ansible collections

.ansible-lint

@@ -3,3 +3,7 @@ skip_list:
   - 401
   - 301
   - 503
+
+exclude_paths:
+  - galaxy_roles/
+  - galaxy_collections/

.gitignore

@@ -1,3 +1,4 @@
 *.retry
 env/
 galaxy_roles/
+galaxy_collections/

ansible.cfg

@@ -3,6 +3,7 @@ nocows = 1
 host_key_checking = False
 retry_files_enabled = False
 roles_path = ./galaxy_roles:./roles
+collections_path = ./galaxy_collections
 inventory = ./hosts
 become_ask_pass = True
 interpreter_python = /usr/bin/python3

galaxy-requirements.yml

@@ -1,3 +1,8 @@
+collections:
+  - ansible.posix
+  - community.general
+
+roles:
   - src: kewlfft.aur
   - src: geerlingguy.ntp
   - src: realorangeone.reflector

scripts/deploy.sh

@@ -2,4 +2,4 @@
 
 set -ex
 
-sudo env/bin/ansible-playbook dotfiles.yml
+time sudo ansible-playbook dotfiles.yml

scripts/lint.sh

@@ -8,6 +8,6 @@ set -x
 
 yamllint -sc yamllint.yml yamllint.yml dotfiles.yml tasks/ vars.yml
 
-ansible-lint dotfiles.yml -p -c .ansible-lint --exclude galaxy_roles/
+ansible-lint dotfiles.yml -p -c .ansible-lint
 
 ansible-playbook dotfiles.yml --syntax-check

tasks/security.yml

@@ -18,7 +18,6 @@
     path: "{{ home }}/.ssh"
     owner: "{{ user }}"
     mode: 0700
-    directory_mode: 0700
 
 - name: Install assh config
   copy:
@@ -53,7 +52,7 @@
   register: firewall_ports
 
 - name: Open firewall ports
-  firewalld:
+  ansible.posix.firewalld:
     port: "{{ item }}"
     permanent: true
     immediate: true
@@ -61,7 +60,7 @@
   loop: "{{ requested_firewall_ports }}"
 
 - name: Close firewall ports
-  firewalld:
+  ansible.posix.firewalld:
     port: "{{ item }}"
     permanent: true
     immediate: true

yamllint.yml

@@ -8,3 +8,7 @@ rules:
     required: only-when-needed
   line-length:
     max: 150
+
+ignore: |
+  galaxy_roles
+  galaxy_collections