Merge SSH into base role
This commit is contained in:
8
ansible/roles/base/tasks/main.yml
Normal file
8
ansible/roles/base/tasks/main.yml
Normal file
@ -0,0 +1,8 @@
|
||||
- name: Packages
|
||||
include: packages.yml
|
||||
|
||||
- name: User
|
||||
include: user.yml
|
||||
|
||||
- name: SSH
|
||||
include: ssh.yml
|
13
ansible/roles/base/tasks/packages.yml
Normal file
13
ansible/roles/base/tasks/packages.yml
Normal file
@ -0,0 +1,13 @@
|
||||
- name: Install Base Packages
|
||||
package:
|
||||
name: "{{ item }}"
|
||||
become: true
|
||||
loop:
|
||||
- htop
|
||||
- neofetch
|
||||
- net-tools
|
||||
- pv
|
||||
- speedtest-cli
|
||||
- sudo
|
||||
- vim
|
||||
- git
|
38
ansible/roles/base/tasks/ssh.yml
Normal file
38
ansible/roles/base/tasks/ssh.yml
Normal file
@ -0,0 +1,38 @@
|
||||
- name: Install OpenSSH for Debian
|
||||
package:
|
||||
name: openssh-server
|
||||
become: true
|
||||
when: ansible_os_family == 'Debian'
|
||||
|
||||
- name: Install OpenSSH for Arch
|
||||
package:
|
||||
name: openssh
|
||||
become: true
|
||||
when: ansible_os_family == 'ArchLinux'
|
||||
|
||||
- name: Define context
|
||||
set_fact:
|
||||
user: jake
|
||||
enable_root: false
|
||||
|
||||
- name: SSH config
|
||||
template:
|
||||
src: files/sshd_config
|
||||
dest: /etc/ssh/sshd_config
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
backup: yes
|
||||
become: true
|
||||
register: sshd_config
|
||||
|
||||
- name: Enable SSH
|
||||
service:
|
||||
name: sshd
|
||||
enabled: true
|
||||
become: true
|
||||
|
||||
- name: Restart SSH Daemon
|
||||
service:
|
||||
name: sshd
|
||||
state: reloaded
|
||||
when: sshd_config.changed
|
||||
become: true
|
14
ansible/roles/base/tasks/user.yml
Normal file
14
ansible/roles/base/tasks/user.yml
Normal file
@ -0,0 +1,14 @@
|
||||
- name: Make me
|
||||
user:
|
||||
name: "{{ user }}"
|
||||
home: "{{ home }}"
|
||||
comment: Jake Howard
|
||||
shell: /bin/bash
|
||||
system: true
|
||||
become: true
|
||||
|
||||
- name: Give user sudo access
|
||||
lineinfile:
|
||||
path: /etc/sudoers
|
||||
line: "{{ user }} ALL=(ALL) ALL"
|
||||
become: true
|
Reference in New Issue
Block a user