Compare commits
8 Commits
d25bbd91f5
...
33f7b59251
| Author | SHA1 | Date | |
|---|---|---|---|
| 33f7b59251 | |||
| 485b596c1b | |||
| 00eafd9e44 | |||
| 342631679a | |||
| 30aafcbc6a | |||
| 0bd9f6bfa7 | |||
| 326d47eb53 | |||
| ba8baafa27 |
@@ -4,3 +4,10 @@
|
||||
# [WARNING]: Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700,
|
||||
# this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually"
|
||||
allow_world_readable_tmpfiles: true
|
||||
|
||||
|
||||
ansible_user_id: root
|
||||
interactive_user:
|
||||
interactive_home:
|
||||
interactive_password:
|
||||
|
||||
|
||||
@@ -10,8 +10,8 @@
|
||||
- { regexp: "^#?ForwardToSyslog", line: ForwardToSyslog=no }
|
||||
- { regexp: "^#?SystemMaxUse", line: SystemMaxUse=100M }
|
||||
notify: Restart systemd-journald
|
||||
vars:
|
||||
ansible_remote_tmp: /tmp # Prevent warnings for auto-created tmp dir
|
||||
# vars:
|
||||
# ansible_remote_tmp: /tmp # Prevent warnings for auto-created tmp dir
|
||||
|
||||
# A succesful vacuum does impact log size, but is not considered a change
|
||||
- name: Vacuum journalctl before
|
||||
|
||||
@@ -6,11 +6,13 @@
|
||||
- name: Ensure required packages are present on systems
|
||||
ansible.builtin.import_tasks: prereq-packages.yml
|
||||
|
||||
- name: Make /tmp non-executable
|
||||
ansible.builtin.import_tasks: tmp-nonexec.yml
|
||||
# not sure if needed, but I'll leave it here as a reference if needed.
|
||||
# - name: Make /tmp non-executable
|
||||
# ansible.builtin.import_tasks: tmp-nonexec.yml
|
||||
|
||||
- name: Import tasks to ensure creation of unprivileged user
|
||||
ansible.builtin.import_tasks: unpriv-user.yml
|
||||
# not sure if needed, but I'll leave it here as a reference if needed.
|
||||
# - name: Import tasks to ensure creation of unprivileged user
|
||||
# ansible.builtin.import_tasks: unpriv-user.yml
|
||||
|
||||
- name: Import custom fact setting
|
||||
ansible.builtin.import_tasks: custom-fact.yml
|
||||
@@ -19,14 +21,16 @@
|
||||
ansible.builtin.debug:
|
||||
var: ansible_local['cpu_info']
|
||||
|
||||
- name: Firmware block for x86_64 systems
|
||||
when: "'Dell' in ansible_board_vendor or 'LENOVO' in ansible_board_vendor"
|
||||
block:
|
||||
- name: Import firmware tasks
|
||||
ansible.builtin.import_tasks: additional-firmware.yml
|
||||
# Not necessary for me
|
||||
# - name: Firmware block for x86_64 systems
|
||||
# when: "'Dell' in ansible_board_vendor or 'LENOVO' in ansible_board_vendor"
|
||||
# block:
|
||||
# - name: Import firmware tasks
|
||||
# ansible.builtin.import_tasks: additional-firmware.yml
|
||||
|
||||
- name: Import color-shell tasks for the common-role
|
||||
ansible.builtin.import_tasks: color-shell.yml
|
||||
# not sure if needed, but I'll leave it here as a reference if needed.
|
||||
# - name: Import color-shell tasks for the common-role
|
||||
# ansible.builtin.import_tasks: color-shell.yml
|
||||
|
||||
- name: Import journald tasks for the common-role
|
||||
ansible.builtin.import_tasks: edit-journald.yml
|
||||
@@ -40,5 +44,5 @@
|
||||
- name: Set the custom message of the day (motd)
|
||||
ansible.builtin.import_tasks: motd.yml
|
||||
|
||||
- name: Perform SSH daemon hardening
|
||||
ansible.builtin.import_tasks: ssh-config.yml
|
||||
# - name: Perform SSH daemon hardening
|
||||
# ansible.builtin.import_tasks: ssh-config.yml
|
||||
|
||||
@@ -8,8 +8,8 @@
|
||||
path: /etc/hosts
|
||||
regexp: 127\.0\.1\.1
|
||||
replace: "{{ ansible_host }} {{ inventory_hostname }}"
|
||||
vars:
|
||||
ansible_remote_tmp: /tmp # Prevent warnings for auto-created tmp dir
|
||||
# vars:
|
||||
# ansible_remote_tmp: /tmp # Prevent warnings for auto-created tmp dir
|
||||
|
||||
- name: Ensure at least one full hostname entry is present
|
||||
ansible.builtin.lineinfile:
|
||||
@@ -17,6 +17,6 @@
|
||||
regexp: "{{ ansible_host }}.*{{ inventory_hostname }}"
|
||||
line: "{{ ansible_host }} {{ inventory_hostname }}"
|
||||
state: present
|
||||
vars:
|
||||
ansible_remote_tmp: /tmp # Prevent warnings for auto-created tmp dir
|
||||
# vars:
|
||||
# ansible_remote_tmp: /tmp # Prevent warnings for auto-created tmp dir
|
||||
when: "'activedirectory' not in group_names"
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
- name: Ensure the proper locales are present and generated
|
||||
community.general.locale_gen:
|
||||
name:
|
||||
- "nl_NL.UTF-8"
|
||||
- "it_IT.UTF-8"
|
||||
- "en_US.UTF-8"
|
||||
- "en_GB.UTF-8"
|
||||
state: present
|
||||
|
||||
Reference in New Issue
Block a user