Move the nat_dhcp jail to an unencrypted dataset so it can be available at boot.

ansible/roles/media/tasks/common.yaml

@@ -15,6 +15,7 @@
     state: present
 
 - include_tasks: "tasks/{{graphics_driver}}.yaml"
+  when: install_graphics # TODO: Maybe this should be when graphics_driver is defined to support headless casting
 
 - import_tasks: tasks/freebsd.yaml
   when: 'os_flavor == "freebsd"'

ansible/roles/media/tasks/peruser.yaml

@@ -2,6 +2,7 @@
     name: per_user
 
 - name: Create directories
+  when: install_graphics
   file:
     name: "{{ account_homedir.stdout }}/{{ item }}"
     state: directory
@@ -12,6 +13,7 @@
     - ".config/mpv"
 
 - name: Copy files
+  when: install_graphics
   copy:
     src: "files/{{ item.src }}"
     dest: "{{ account_homedir.stdout }}/{{ item.dest }}"