feat: disable personalized ads

Author: lotyp

.ansible-lint

@@ -1,5 +1,7 @@
 ---
 
+# https://ansible-lint.readthedocs.io/en/latest/configuring/
+
 skip_list:
   - 'experimental'
   - 'risky-shell-pipe'

.pre-commit-config.yaml

@@ -1,9 +1,23 @@
 ---
 
 repos:
-  - hooks:
+  - repo: https://github.com/adrienverge/yamllint
+    rev: v1.26.3
+    hooks:
+      - id: yamllint
+        files: \.(yaml|yml)$
+        types: [file, yaml]
+        entry: yamllint --strict
+
+  - repo: https://github.com/commitizen-tools/commitizen
+    rev: v2.24.0
+    hooks:
       - id: commitizen
         stages:
           - commit-msg
-    repo: https://github.com/commitizen-tools/commitizen
-    rev: v2.20.0
+
+  - repo: https://github.com/ansible/ansible-lint
+    rev: v6.0.2
+    hooks:
+      - id: ansible-lint
+        files: \.(yaml|yml)$

defaults/main.yml

@@ -453,6 +453,9 @@ security:
     # Turn off Feedback Assistant data auto-gathering.
     apple_feedback_assistant: false
 
+    # Turn off personalized ads, a little less tracking from apple side...
+    disable_personalized_ads: true
+
   firewall:
     # Turn on system firewall.
     # Turned off by default.

tasks/security.yml

@@ -21,16 +21,25 @@
     state: present
   changed_when: false
 
-### Feedback Assistant
+### Privacy
 
-- name: Security - Feedback Assistant - Turn off Feedback Assistant data auto-gathering.
+- name: Security - Privacy / Feedback Assistant - Turn off Feedback Assistant data auto-gathering.
   community.general.osx_defaults:
     domain: com.apple.appleseed.FeedbackAssistant
     key: Autogather
     type: bool
     value: "{{ security.privacy.apple_feedback_assistant }}"
     state: present
 
+- name: Security - Privacy / Advertising - Disable Personalized Ads.
+  community.general.osx_defaults:
+    domain: com.apple.AdLib
+    key: allowApplePersonalizedAdvertising
+    type: int
+    value: 0
+    state: present
+  when: security.privacy.disable_personalized_ads
+
 ### Firewall
 
 # Alternative way