go with keyfile

roles/network/tasks/debian.yml

@@ -58,23 +58,33 @@
   when: dnsmasq_install
 
 # do this
-- name: Copy NetworkManager.conf for has_NM
-  template: dest=/etc/NetworkManager/NetworkManager.conf
-            src=network/NetworkManager.conf
-  when: has_NM and iiab_lan_iface == "br0"
+#- name: Copy NetworkManager.conf for has_NM
+#  template: dest=/etc/NetworkManager/NetworkManager.conf
+#            src=network/NetworkManager.conf
+#  when: has_NM and iiab_lan_iface == "br0"
+
+#- name: Copy the bridge script for has_NM
+#  template: dest=/etc/network/interfaces
+#            src=network/systemd.j2
+#  when: has_NM and not wan_in_interfaces and iiab_lan_iface == "br0"
+
+# or provide keyfile layout like the XO's used way back.
+- name: Create uuid for NM
+  shell: uuidgen
+  register: uuid_response
+  when: has_NM and not wan_in_interfaces and iiab_lan_iface == "br0"
+
+- name: Put the uuid in place
+  set_fact:
+    gen_uuid: "{{ uuid_response.stdout_lines[0] }}"
+  when: has_NM and not wan_in_interfaces and iiab_lan_iface == "br0"
 
 # NM might have a watcher on this path and we don't have to restart NM
 - name: Copy the bridge script for has_NM
-  template: dest=/etc/network/interfaces
-            src=network/systemd.j2
+  template: dest=/etc/NetworkManager/system-connections/
+            src=network/bridge-br0
   when: has_NM and not wan_in_interfaces and iiab_lan_iface == "br0"
 
-# or provide keyfile layout like the XO's used way back.
-#- name: Copy the bridge script for has_NM
-#  template: dest=/etc/NetworkManager/system-connections/
-#            src=network/bridge-br0
-#  when: has_NM and not wan_in_interfaces and iiab_lan_iface == "br0"
-
 - name: Reload systemd
   shell: systemctl daemon-reload