71 lines
1.5 KiB
YAML
71 lines
1.5 KiB
YAML
- name: Install base packages
|
|
package:
|
|
state: present
|
|
name: "{{ base_packages }}"
|
|
|
|
- name: Include OS-specific variables
|
|
include_vars: "{{ lookup('first_found', params) }}"
|
|
vars:
|
|
params:
|
|
files: "{{ distro_lookup_path }}"
|
|
paths:
|
|
- 'vars'
|
|
|
|
- name: Install distro specific packages
|
|
package:
|
|
state: present
|
|
name: "{{ distro_packages }}"
|
|
|
|
- name: Increase syslog message size in order to capture python tracebacks
|
|
copy:
|
|
content: '$MaxMessageSize 6k'
|
|
dest: /etc/rsyslog.d/99-maxsize.conf
|
|
mode: 0644
|
|
notify: Restart rsyslog
|
|
|
|
- name: Ensure rsyslog is running
|
|
service:
|
|
name: rsyslog
|
|
enabled: yes
|
|
state: started
|
|
|
|
- name: Set ssh key for managment
|
|
authorized_key:
|
|
state: present
|
|
user: root
|
|
exclusive: yes
|
|
key: "{{ bastion_public_key }}"
|
|
key_options: |
|
|
from="{{ bastion_ipv4 }},{{ bastion_ipv6 }},localhost"
|
|
|
|
- name: Install sshd config
|
|
template:
|
|
src: sshd_config.j2
|
|
dest: /etc/ssh/sshd_config
|
|
owner: root
|
|
group: root
|
|
mode: 0444
|
|
notify: Restart ssh
|
|
|
|
- name: Disable byobu
|
|
file:
|
|
path: /etc/profile.d/Z98-byobu.sh
|
|
state: absent
|
|
|
|
- name: Setup RFC3339 bash history timestamps
|
|
copy:
|
|
mode: 0644
|
|
src: bash-history.sh
|
|
dest: /etc/profile.d/bash-history.sh
|
|
|
|
- name: Ensure NTP service is running
|
|
service:
|
|
name: "{{ ntp_service_name }}"
|
|
enabled: yes
|
|
state: started
|
|
|
|
- name: Include OS-specific tasks
|
|
include_tasks: "{{ lookup('first_found', file_list) }}"
|
|
vars:
|
|
file_list: "{{ distro_lookup_path }}"
|