51 lines
1.1 KiB
YAML
51 lines
1.1 KiB
YAML
- include_tasks: "sudoers.yml"
|
|
loop:
|
|
- { src: "sudoers.j2", dest: "/etc/sudoers.d/20-ansible-extra" }
|
|
|
|
- name: copy ssh template
|
|
template:
|
|
src: "sshd_config.j2"
|
|
dest: "/etc/ssh/sshd_config"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: reload ssh
|
|
|
|
- name: viva la hollande
|
|
locale_gen:
|
|
name: nl_NL.UTF-8
|
|
state: present
|
|
|
|
- name: ensure basic tooling is installed
|
|
apt:
|
|
name:
|
|
- acl
|
|
- man
|
|
- apt-transport-https
|
|
- ca-certificates
|
|
- software-properties-common
|
|
- policykit-1
|
|
- libpolkit-agent-1-0
|
|
- nftables
|
|
- openssh-client
|
|
- bash-completion
|
|
- git
|
|
- vim
|
|
- curl
|
|
- tree
|
|
- haveged
|
|
- rsync
|
|
state: present
|
|
|
|
- name: copy firewall template
|
|
template:
|
|
src: "nftables.j2"
|
|
dest: "/etc/nftables.conf"
|
|
owner: root
|
|
group: root
|
|
mode: "0600"
|
|
notify: restart nftables
|
|
|
|
# see https://wiki.debian.org/systemd#Orphaned_processes
|
|
- name: enable loginctl user-linger
|
|
command: "loginctl enable-linger {{ default_user|quote }}" # noqa 301
|