install-tightvnc-and-ssh.yaml

---
- name: Setup home server
  hosts: all
  gather_facts: false
  vars:
    service_file_location: /etc/systemd/system/vncserver@.service
  tasks:
    #https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-vnc-on-ubuntu-18-04
    - name: Install tightvnc and ssh
      become: true
      apt:
        update_cache: yes
        pkg:
          - openssh-server
          - tightvncserver
          - xfce4 
          - xfce4-goodies

    - name: Backup old config
      command: mv /home/{{ ansible_user }}/.vnc/xstartup /home/{{ ansible_user }}/.vnc/xstartup.bak
      ignore_errors: True

    - name: Setup password
      expect:
        command: vncpasswd
        responses:
          Password: "{{ vnc.password }}"
          Verify: "{{ vnc.password }}"
          "Would you like to enter a view-only password (y/n)?": n

    - name: Copy over the new config
      copy:
        src: tightvnc_config/xstartup
        dest: /home/{{ ansible_user }}/.vnc/xstartup
        mode: "755"

    - name: Copy over the service file for systemd
      become: true
      copy:
        src: tightvnc_config/vncserver@.service
        dest: /etc/systemd/system/vncserver@.service

    - name: "Service file edit: Change User to be {{ ansible_user }}"
      become: True
      # https://gist.github.com/drmalex07/c0f9304deea566842490
      lineinfile:
        path: "{{ service_file_location }}"
        regexp: '^User=(.*)$'
        line: "User={{ ansible_user }}"
        backrefs: yes

    - name: "Service file edit: Change Group to be {{ ansible_user }}"
      become: True
      # https://gist.github.com/drmalex07/c0f9304deea566842490
      lineinfile:
        path: "{{ service_file_location }}"
        regexp: '^Group=(.*)$'
        line: "Group={{ ansible_user }}"
        backrefs: yes

    - name: "Service file edit: Change WorkingDirectory to be {{ dir_home }}"
      become: True
      # https://gist.github.com/drmalex07/c0f9304deea566842490
      lineinfile:
        path: "{{ service_file_location }}"
        regexp: '^WorkingDirectory=(.*)$'
        line: "WorkingDirectory={{ dir_home }}"
        backrefs: yes

    - name: "Service file edit: Change WorkingDirectory to be {{ dir_home }}/.vnc/%H:%i.pid"
      become: True
      # https://gist.github.com/drmalex07/c0f9304deea566842490
      lineinfile:
        path: "{{ service_file_location }}"
        regexp: '^PIDFile=(.*)$'
        line: "PIDFile={{ dir_home }}/.vnc/%H:%i.pid"
        backrefs: yes

    - name: Reload systemd service
      include_tasks: tasks-reload-systemd-service.yaml
      vars:
        service_name: "vncserver@{{ vnc.display }}.service"
        become: True

    - include_tasks: tasks-allow-ports.yaml # should already work
      vars:
        ports: 
          - "ssh"
          - "590{{ vnc.display }}"