fix meshvpn related tasks

host_vars/kaisertor.yml

 # real host address
 
-# MAC address: de:ad:ca:fe:<gateway>:<iface-type>
-
 ip4: 10.130.0.255
 ip6: 2001:67c:2d50::aaaa
 ip6_ula: fdef:ffc0:3dd7::aaaa

roles/base/tasks/mesh-vpn.yml

@@ -42,10 +42,8 @@
 
 
 # enable services
-
-# download public keys to our local machine
 - name: run meshvpn-keys update script
-  script: /usr/local/lib/ffhl/update-meshvpn-keys.sh
+  command: /usr/local/lib/ffhl/update-meshvpn-keys.sh
 
 - name: enable fastd instances
   loop: "{{ mesh_vpn_instances }}"

roles/base/tasks/software.yml

@@ -29,7 +29,6 @@
       - isc-dhcp-server
       - openssh-server
       - prometheus-node-exporter
-      - python-apt
       - radvd
       # - systemd-timesyncd causes dependency hell atm
       # tools

roles/base/tasks/units.yml

@@ -32,10 +32,8 @@
     - haveged.service
     - netfilter-persistent.service
     - isc-dhcp-server.service
-    - pdns-recursor.service
     - radvd.service
     - systemd-networkd.service
-    - update-ffhl-dns.timer
     - update-ffhl-mesh-vpn.timer
     - systemd-journald
     - fastd

roles/base/templates/mesh-vpn/update-meshvpn-keys.sh

@@ -12,5 +12,7 @@ git --git-dir="$DIR/.git" --work-tree="$DEST" reset --hard
 rm -rf "$DIR"
 
 {% for instance in mesh_vpn_instances %}
-systemctl reload 'fastd@{{ instance.name }}.service'
+if [ systemctl is-active fastd@{{ instance.name }} ]; then
+	systemctl reload 'fastd@{{ instance.name }}.service'
+fi
 {% endfor %}