From 81ccc6cab0440fd5bb12d9d788743cbc660b221b Mon Sep 17 00:00:00 2001
From: Michael Mandl <mandlm@molez.net>
Date: Mon, 25 Oct 2021 08:33:32 +0200
Subject: [PATCH] fix: set sddm permissions after installation

---
 roles/user-account/tasks/main.yaml | 18 +-----------------
 roles/xorg/tasks/main.yaml         | 16 ++++++++++++++++
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/roles/user-account/tasks/main.yaml b/roles/user-account/tasks/main.yaml
index b16668f..d8e6294 100644
--- a/roles/user-account/tasks/main.yaml
+++ b/roles/user-account/tasks/main.yaml
@@ -1,5 +1,5 @@
 ---
-- name: setup user account
+- name: setup user account {{ username }}
   user:
     name: "{{ username }}"
     password: "{{ password }}"
@@ -75,22 +75,6 @@
     dest: "/home/{{ account.name }}/.face.icon"
     mode: "0644"
 
-- name: grant sddm read permission to home
-  acl:
-    path: "/home/{{ account.name }}/"
-    entity: sddm
-    etype: user
-    permissions: x
-    state: present
-
-- name: grant sddm read permission user icon
-  acl:
-    path: "/home/{{ account.name }}/.face.icon"
-    entity: sddm
-    etype: user
-    permissions: r
-    state: present
-
 - name: ensure i3 config-dir exists
   become_user: "{{ account.name }}"
   file:
diff --git a/roles/xorg/tasks/main.yaml b/roles/xorg/tasks/main.yaml
index 052f416..131564b 100644
--- a/roles/xorg/tasks/main.yaml
+++ b/roles/xorg/tasks/main.yaml
@@ -37,6 +37,22 @@
     mode: 0644
     create: yes
 
+- name: grant sddm read permission to {{ account.name }} home
+  acl:
+    path: "/home/{{ username }}/"
+    entity: sddm
+    etype: user
+    permissions: x
+    state: present
+
+- name: grant sddm read permission user icon
+  acl:
+    path: "/home/{{ username }}/.face.icon"
+    entity: sddm
+    etype: user
+    permissions: r
+    state: present
+
 - name: activate display manager
   systemd:
     name: sddm