- name: Installation des unités systemd divers
  copy:
    src: "{{ item }}"
    dest: /etc/systemd/system/
    mode: 0644
  with_items:
    - capslock-led-heartbeat.service
    - dnf-makecache.timer
  notify: reload systemd

- name: Installation des unités systemd de monitoring
  copy:
    src: "{{ item[0] }}-{{ item[1] }}.service"
    dest: /etc/systemd/system/
    mode: 0644
  with_nested:
    - [ 'arp-poisoning', 'arp-watcher' ]
    - [ 'eno1', 'enp6s0' ]
  notify: reload systemd

- name: Installation des unités systemd de capture
  copy:
    src: "passerelle-dump-{{ item }}.service"
    dest: /etc/systemd/system/
    mode: 0644
  with_items:
    - eno1
    - enp6s0
    - virbr0
  notify: reload systemd

- name: Installation des unités systemd de dev
  copy:
    src: "{{ item[0] }}-{{ item[1] }}.service"
    dest: /etc/systemd/system/
    mode: 0644
  with_nested:
    - [ 'apache', 'mariadb', 'memcached', 'php-fpm' ]
    - [ 'casper-site', 'cirrus', 'jays-site' ]
  notify: reload systemd

- name: Installation des variables credentials
  copy:
    src: "credentials/mariadb-{{ item }}.env"
    dest: /etc/
    mode: 0400
  with_items:
    - casper-site
    - cirrus
    - jays-site
  notify: reload systemd

- name: Configuration leds de dracut
  copy:
    src: led_modules.conf
    dest: /etc/dracut.conf.d/led_modules.conf
    mode: 0644

- name: Configuration leds modules du noyau
  copy:
    src: modules-load.d_led_modules.conf
    dest: /etc/modules-load.d/led_modules.conf
    mode: 0644

- name: Ettercap redirection iptables on
  lineinfile:
    path: /etc/ettercap/etter.conf
    create: yes
    state: present
    line: 'redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"'

- name: Ettercap redirection iptables off
  lineinfile:
    path: /etc/ettercap/etter.conf
    create: yes
    state: present
    line: 'redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"'

- name: Ettercap redirection iptables6 on
  lineinfile:
    path: /etc/ettercap/etter.conf
    create: yes
    state: present
    line: 'redir6_command_on = "ip6tables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"'

- name: Ettercap redirection iptables6 off
  lineinfile:
    path: /etc/ettercap/etter.conf
    create: yes
    state: present
    line: 'redir6_command_off = "ip6tables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"'

- name: Configuration audio de libvirtd
  lineinfile:
    path: /etc/libvirt/qemu.conf
    create: yes
    state: present
    line: "vnc_allow_host_audio = 1"