Remove unnecessary use of become
from some roles
This should make execution much faster
This commit is contained in:
@ -1,25 +1,21 @@
|
||||
- name: Install fail2ban
|
||||
package:
|
||||
name: fail2ban
|
||||
become: true
|
||||
|
||||
- name: Enable fail2ban
|
||||
service:
|
||||
name: fail2ban
|
||||
enabled: true
|
||||
become: true
|
||||
|
||||
- name: fail2ban SSH jail
|
||||
template:
|
||||
src: files/ssh-jail.conf
|
||||
dest: /etc/fail2ban/jail.d/ssh.conf
|
||||
mode: "0600"
|
||||
become: true
|
||||
register: fail2ban_jail
|
||||
|
||||
- name: Restart fail2ban
|
||||
service:
|
||||
name: fail2ban
|
||||
state: restarted
|
||||
become: true
|
||||
when: fail2ban_jail.changed
|
||||
|
@ -1,13 +1,11 @@
|
||||
- name: Install logrotate
|
||||
package:
|
||||
name: logrotate
|
||||
become: true
|
||||
|
||||
- name: Enable logrotate timer
|
||||
service:
|
||||
name: logrotate.timer
|
||||
enabled: true
|
||||
become: true
|
||||
when: ansible_os_family == 'Archlinux'
|
||||
|
||||
- name: logrotate fail2ban config
|
||||
@ -15,4 +13,3 @@
|
||||
src: files/fail2ban-logrotate
|
||||
dest: /etc/logrotate.d/fail2ban
|
||||
mode: "0600"
|
||||
become: true
|
||||
|
@ -1,7 +1,6 @@
|
||||
- name: Install Base Packages
|
||||
package:
|
||||
name: "{{ item }}"
|
||||
become: true
|
||||
loop:
|
||||
- htop
|
||||
- neofetch
|
||||
|
@ -1,13 +1,11 @@
|
||||
- name: Install OpenSSH for Debian
|
||||
package:
|
||||
name: openssh-server
|
||||
become: true
|
||||
when: ansible_os_family == 'Debian'
|
||||
|
||||
- name: Install OpenSSH for Arch
|
||||
package:
|
||||
name: openssh
|
||||
become: true
|
||||
when: ansible_os_family == 'Archlinux'
|
||||
|
||||
- name: Define context
|
||||
@ -22,7 +20,6 @@
|
||||
validate: /usr/sbin/sshd -t -f %s
|
||||
backup: true
|
||||
mode: "644"
|
||||
become: true
|
||||
register: sshd_config
|
||||
|
||||
- name: Set up authorized keys
|
||||
@ -38,11 +35,9 @@
|
||||
service:
|
||||
name: sshd
|
||||
enabled: true
|
||||
become: true
|
||||
|
||||
- name: Restart SSH Daemon
|
||||
service:
|
||||
name: sshd
|
||||
state: reloaded
|
||||
when: sshd_config.changed
|
||||
become: true
|
||||
|
@ -5,11 +5,9 @@
|
||||
comment: "{{ me.name }}"
|
||||
shell: /bin/bash
|
||||
system: true
|
||||
become: true
|
||||
|
||||
- name: Give user sudo access
|
||||
user:
|
||||
name: "{{ me.user }}"
|
||||
groups: "{{ 'sudo' if ansible_os_family == 'Debian' else 'wheel' }}"
|
||||
append: true
|
||||
become: true
|
||||
|
Reference in New Issue
Block a user