203 lines
4.4 KiB
YAML
203 lines
4.4 KiB
YAML
---
|
|
|
|
# load os variables
|
|
- name: "include os specific vars"
|
|
ansible.builtin.include_vars: "{{ ansible_os_family }}.yaml"
|
|
tags: "always"
|
|
|
|
# set hostname
|
|
- name: "set hostname"
|
|
ansible.builtin.import_tasks: "hostname.yaml"
|
|
tags: "hostname"
|
|
|
|
# set locale
|
|
- name: "set locale"
|
|
ansible.builtin.import_tasks: "locale.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "locale"
|
|
|
|
# environment
|
|
- name: "environment"
|
|
ansible.builtin.import_tasks: "environment.yaml"
|
|
tags: "environment-file"
|
|
|
|
# motd
|
|
- name: "motd"
|
|
ansible.builtin.import_tasks: "motd.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "motd"
|
|
|
|
# cron jobs
|
|
- name: "cron jobs"
|
|
ansible.builtin.import_tasks: "cron.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "cron"
|
|
|
|
# swap
|
|
- name: "swap"
|
|
ansible.builtin.import_tasks: "swap.yaml"
|
|
when:
|
|
- 'type == "vm"'
|
|
- "ansible_os_family =='Debian'"
|
|
tags: "swap"
|
|
|
|
# apt
|
|
- name: "apt"
|
|
ansible.builtin.import_tasks: "apt/sources.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "apt"
|
|
|
|
# flush handler
|
|
- name: "flush handlers"
|
|
ansible.builtin.meta: "flush_handlers"
|
|
|
|
- name: "apt - update"
|
|
ansible.builtin.import_tasks: "apt/update.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "apt-update"
|
|
|
|
- name: "apt - packages"
|
|
ansible.builtin.import_tasks: "apt/packages.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "apt"
|
|
|
|
- name: "apt - config"
|
|
ansible.builtin.import_tasks: "apt/config.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "apt"
|
|
|
|
- name: "apt - cleanup"
|
|
ansible.builtin.import_tasks: "apt/cleanup.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "apt-cleanup"
|
|
|
|
# telemetry
|
|
- name: "telemetry"
|
|
ansible.builtin.import_tasks: "telemetry.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "telemetry"
|
|
|
|
# service
|
|
- name: "service"
|
|
ansible.builtin.include_tasks: "service.yaml"
|
|
loop: "{{ service }}"
|
|
loop_control:
|
|
loop_var: "__service"
|
|
when:
|
|
- "service is defined"
|
|
- "ansible_os_family == 'Debian'"
|
|
|
|
# flush handler
|
|
- name: "flush handlers"
|
|
ansible.builtin.meta: "flush_handlers"
|
|
|
|
# chrony
|
|
- name: "ntp"
|
|
ansible.builtin.import_tasks: "ntp.yaml"
|
|
when:
|
|
- 'type == "vm" or type == "hw"'
|
|
- "ansible_os_family == 'Debian'"
|
|
tags: "ntp"
|
|
|
|
# flush handler
|
|
- name: "flush handlers"
|
|
ansible.builtin.meta: "flush_handlers"
|
|
|
|
# snap
|
|
- name: "snap - daemon"
|
|
ansible.builtin.import_tasks: "snap/snap_daemon.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "snap"
|
|
|
|
- name: "snap - package"
|
|
ansible.builtin.import_tasks: "snap/snap_package.yaml"
|
|
when:
|
|
- "snap_package is defined"
|
|
- "ansible_os_family == 'Debian'"
|
|
tags: "snap"
|
|
|
|
# lxd
|
|
- name: "lxd"
|
|
ansible.builtin.import_tasks: "lxd.yaml"
|
|
when:
|
|
- 'type == "vm"'
|
|
- "ansible_os_family == 'Debian'"
|
|
tags: "lxd"
|
|
|
|
# flush handler
|
|
- name: "flush handlers"
|
|
ansible.builtin.meta: "flush_handlers"
|
|
|
|
# sysctl
|
|
- name: "sysctl - set sysctl"
|
|
ansible.builtin.include_tasks: "sysctl.yaml"
|
|
loop: "{{ sysctl }}"
|
|
loop_control:
|
|
loop_var: "__sysctl"
|
|
when: 'type == "vm" or type == "hw"'
|
|
tags: "sysctl"
|
|
|
|
# systemctl
|
|
- name: "sysctl - set systemctl"
|
|
ansible.builtin.include_tasks: "systemctl.yaml"
|
|
loop: "{{ systemctl }}"
|
|
loop_control:
|
|
loop_var: "__systemctl"
|
|
when:
|
|
- 'type == "vm"'
|
|
- "ansible_os_family == 'Debian'"
|
|
tags: "systemctl"
|
|
|
|
# syslog
|
|
- name: "syslog - install"
|
|
ansible.builtin.import_tasks: "syslog/install.yaml"
|
|
when: "syslog_enable"
|
|
tags: "syslog"
|
|
|
|
- name: "syslog - config"
|
|
ansible.builtin.import_tasks: "syslog/config.yaml"
|
|
when: "syslog_enable"
|
|
tags: "syslog"
|
|
|
|
# flush handler
|
|
- name: "flush handlers"
|
|
ansible.builtin.meta: "flush_handlers"
|
|
|
|
# journald
|
|
- name: "journald"
|
|
ansible.builtin.import_tasks: "journald.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "journald"
|
|
|
|
# flush handler
|
|
- name: "flush handlers"
|
|
ansible.builtin.meta: "flush_handlers"
|
|
|
|
# timezone
|
|
- name: "timezone"
|
|
ansible.builtin.import_tasks: "timezone.yaml"
|
|
tags: "timezone"
|
|
|
|
# sshd
|
|
- name: "sshd"
|
|
ansible.builtin.import_tasks: "sshd.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "sshd"
|
|
|
|
# flush handler
|
|
- name: "flush handlers"
|
|
ansible.builtin.meta: "flush_handlers"
|
|
|
|
# user
|
|
- name: "user - create users"
|
|
ansible.builtin.include_tasks: "user.yaml"
|
|
tags: "usermanagement"
|
|
loop: "{{ users }}"
|
|
loop_control:
|
|
loop_var: "__user"
|
|
|
|
# firewall
|
|
- name: "firewall"
|
|
ansible.builtin.import_tasks: "firewall.yaml"
|
|
when: "ansible_os_family == 'Debian'"
|
|
tags: "firewall"
|