make linter happy

main
Ricard Illa 2022-09-04 17:25:14 +02:00
parent 3782a5420d
commit 9d5d211ac4
No known key found for this signature in database
GPG Key ID: F69A672B72E54902
17 changed files with 31 additions and 14 deletions

View File

@ -1,6 +1,7 @@
---
- name: snitch deployment
hosts: snitch
become: yes
become: true
become_method: doas
roles:
- basic
@ -19,7 +20,7 @@
- name: caladan deployment
hosts: caladan
become: yes
become: true
become_method: doas
roles:
- basic
@ -35,7 +36,7 @@
- name: narwhal deployment
hosts: narwhal
become: yes
become: true
become_method: sudo
roles:
- basic

View File

@ -1,3 +1,4 @@
---
all:
hosts:

View File

@ -1,3 +1,4 @@
---
- name: install python3
apk:
name: python3

View File

@ -1,3 +1,4 @@
---
- name: install openssh
apk:
name: openssh
@ -5,5 +6,5 @@
- name: enable sshd service
service:
name: sshd
enabled: yes
enabled: true
state: started

View File

@ -1,3 +1,4 @@
---
- name: ssh_host_ed25519_key-cert.pub
copy:
src: "host_files/{{ ansible_hostname }}/ssh_host_ed25519_key-cert.pub"

View File

@ -1,3 +1,4 @@
---
- name: set sshd config
template:
src: sshd_config.j2

View File

@ -2,6 +2,7 @@
# * curl icanhazip.com
# * http_proxy=caladan:8888 curl icanhazip.com
---
- name: install tinyproxy
apk:
name: tinyproxy
@ -19,7 +20,7 @@
service:
name: tinyproxy
state: started
enabled: yes
enabled: true
when: ansible_distribution == "Alpine"
- name: set awall firewall rule
@ -35,5 +36,5 @@
awall:
name: tinyproxy
state: enabled
activate: yes
activate: true
when: ansible_distribution == "Alpine"

View File

@ -1,2 +1,3 @@
---
dependencies:
- role: wheel

View File

@ -1,3 +1,4 @@
---
- name: create group 'ansible'
group:
name: ansible
@ -12,7 +13,7 @@
password: "*" # disabled password but can be accessed with SSH
groups:
- wheel
append: yes
append: true
- name: make sure ansible owns its home
file:

View File

@ -1,3 +1,4 @@
---
- name: create group 'deploy'
group:
name: deploy

View File

@ -1,3 +1,4 @@
---
- name: create group 'rilla'
group:
name: rilla
@ -12,13 +13,13 @@
groups:
- deploy
- wheel
append: yes
append: true
- name: additional groups to rilla
user:
name: rilla
groups: "{{item}}"
append: yes
append: true
when: item in ansible_facts.getent_group
with_items:
- docker

View File

@ -1,3 +1,4 @@
---
- name: create group 'woodpecker'
group:
name: woodpecker
@ -12,13 +13,13 @@
password: "*" # disabled password but can be accessed with SSH
groups:
- deploy
append: yes
append: true
- name: additional groups to woodpecker
user:
name: woodpecker
groups: "{{item}}"
append: yes
append: true
when: item in ansible_facts.getent_group
with_items:
- docker

View File

@ -1,3 +1,4 @@
---
- name: install doas
apk:
name: doas

View File

@ -1,3 +1,4 @@
---
- name: create 'wheel' group
group:
name: wheel

View File

@ -1,3 +1,4 @@
---
- name: install sudo
apt:
name: sudo

View File

@ -1,3 +1,4 @@
---
- name: install wpa-supplicant (alpine)
apk:
name: wpa_supplicant
@ -21,7 +22,7 @@
service:
name: wpa_supplicant
state: started
enabled: yes
enabled: true
runlevel: boot
when: ansible_distribution == "Alpine"
@ -29,7 +30,7 @@
service:
name: networking
state: started
enabled: yes
enabled: true
runlevel: boot
when: ansible_distribution == "Alpine"
@ -45,6 +46,6 @@
service:
name: wpa_cli
state: started
enabled: yes
enabled: true
runlevel: boot
when: ansible_distribution == "Alpine"

View File

@ -1,3 +1,4 @@
---
wifi_ssid: CocoPeach
wifi_psk: !vault |