add KDE Connect

group_vars/all

@@ -319,6 +319,10 @@ syncthing:
     run_on: trusted
     open_ports: true
 
+kdeconnect:
+    run_on: trusted
+    open_ports: true
+
 mirrorlist:
     run_on: trusted
 

playbook.yml

@@ -92,6 +92,7 @@
     - { role: android, tags: ['android'] }
     - { role: ripgrep, tags: ['ripgrep'] }
     - { role: zeal, tags: ['zeal'] }
+    - { role: kdeconnect, tags: ['kdeconnect'] }
   vars_prompt:
     - name: user_password
       prompt: "Enter desired user password"

roles/iptables/templates/ip6tables.rules.j2

@@ -28,4 +28,8 @@ COMMIT
 -A INPUT -p tcp -m tcp --dport 22000 -j ACCEPT
 -A INPUT -p udp -m udp --dport 21027 -j ACCEPT
 {% endif %}
+{% if kdeconnect.open_ports is defined and kdeconnect.open_ports == True %}
+-A INPUT -p tcp -m tcp --dport 1714:1764 -j ACCEPT
+-A INPUT -p udp -m udp --dport 1714:1764 -j ACCEPT
+{% endif %}
 COMMIT

roles/iptables/templates/iptables.rules.j2

@@ -11,6 +11,10 @@
 -A INPUT -p icmp -m icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
 -A INPUT -p udp -m conntrack --ctstate NEW -j UDP
 -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j TCP
+{% if kdeconnect.open_ports is defined and kdeconnect.open_ports == True %}
+-A INPUT -p tcp -m tcp --dport 1714:1764 -m state --state NEW,ESTABLISHED -j ACCEPT
+-A INPUT -p udp -m udp --dport 1714:1764 -m state --state NEW,ESTABLISHED -j ACCEPT
+{% endif %}
 -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
 -A INPUT -p tcp -j REJECT --reject-with tcp-reset
 -A INPUT -j REJECT --reject-with icmp-proto-unreachable

roles/kdeconnect/meta/main.yml

@@ -0,0 +1,3 @@
+---
+dependencies:
+  - { role: systemd }

roles/kdeconnect/tasks/main.yml

@@ -0,0 +1,16 @@
+---
+- name: Install KDE Connect
+  pacman: name=kdeconnect state=present
+
+- name: Push KDE Connect service file
+  template:
+    src: kdeconnect.service.j2
+    dest: /etc/systemd/user/kdeconnect.service
+  notify:
+    - reload systemd config
+
+- include_tasks: roles/nmtrust/tasks/unit.yml
+  vars:
+      unit: kdeconnect.service
+      run_on: "{{ syncthing.run_on }}"
+      user_unit: true

roles/kdeconnect/templates/kdeconnect.service.j2

@@ -0,0 +1,14 @@
+# {{ ansible_managed }}
+[Unit]
+Description=KDE Connect
+After=graphical.target
+
+[Service]
+Environment=DISPLAY=:0
+ExecStart=/usr/lib/kdeconnectd
+ExecStop=/usr/bin/kquitapp5 kdeconnectd
+Restart=on-failure
+BusName=org.kde.kdeconnect
+
+[Install]
+WantedBy=default.target