ansible/tasks/system.yml

---
- name: System - hent brugernavn
  ansible.builtin.command:
    cmd: whoami
  register: actual_user
  become: false
  changed_when: false

- name: System - sæt fish som login shell
  ansible.builtin.user:
    name: "{{ actual_user.stdout }}"
    shell: /usr/bin/fish

- name: Tailscale - aktiver og start tailscaled
  ansible.builtin.systemd:
    name: tailscaled
    enabled: true
    state: started

- name: System - tillad shutdown uden password (til scripts)
  ansible.builtin.lineinfile:
    path: /etc/sudoers.d/shutdown-nopasswd
    line: "{{ actual_user.stdout }} ALL=(ALL) NOPASSWD: /sbin/shutdown"
    create: true
    mode: '0440'
    validate: 'visudo -cf %s'

- name: System - resolv.conf symlink (NetworkManager + systemd-resolved fix)
  ansible.builtin.file:
    src: /run/systemd/resolve/stub-resolv.conf
    dest: /etc/resolv.conf
    state: link
    force: true