xrdp.yaml

---

- hosts: localhost

  tasks:

    - name: Install dependencies (CentOS/RHEL)
      yum: name={{ item }} state=present disable_gpg_check=yes
      with_items:
        - xrdp
        - xterm
        - mate-desktop
        - gnome-session
        - mate-session-manager
        - gnome-icon-theme
        - mate-icon-theme
        - nautilus
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'RedHat'

    - name: Install dependencies (Ubuntu/Debian)
      apt: name={{ item }} state=present update_cache=yes
      with_items:
        - xrdp
        - xterm
        - gnome-icon-theme
        - mate-icon-theme
        - mate-desktop
        - mate-session-manager
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'

    - name: Enable xrdp at boot
      service: name=xrdp enabled=yes

    - name: Setup startwm.sh on Ubuntu
      copy: src=startwm-ubuntu.sh dest=/etc/xrdp/startwm.sh owner=root group=root mode=755 backup=yes
      notify: restart xrdp
      when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'

    - name: Setup startwm.sh on RHEL
      copy: src=startwm-rhel.sh dest=/etc/xrdp/startwm.sh owner=root group=root mode=755 backup=yes
      notify: restart xrdp
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'RedHat'

    - name: Open up Firewall
      command: firewall-cmd --permanent --zone=public --add-port=3389/tcp
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'RedHat'
      notify: Reload Firewall

    - name: Fix SELinux Contexts
      command: chcon --type=bin_t /usr/sbin/xrdp /usr/sbin/xrdp-sesman
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'RedHat'
      notify: restart xrdp


  handlers:
    - name: restart xrdp
      service: name=xrdp state=restarted

    - name: Reload Firewall
      command: firewall-cmd --reload
      when: ansible_distribution == 'CentOS' or ansible_distribution == 'RedHat'