make linter happy
parent
3782a5420d
commit
9d5d211ac4
|
@ -1,6 +1,7 @@
|
||||||
|
---
|
||||||
- name: snitch deployment
|
- name: snitch deployment
|
||||||
hosts: snitch
|
hosts: snitch
|
||||||
become: yes
|
become: true
|
||||||
become_method: doas
|
become_method: doas
|
||||||
roles:
|
roles:
|
||||||
- basic
|
- basic
|
||||||
|
@ -19,7 +20,7 @@
|
||||||
|
|
||||||
- name: caladan deployment
|
- name: caladan deployment
|
||||||
hosts: caladan
|
hosts: caladan
|
||||||
become: yes
|
become: true
|
||||||
become_method: doas
|
become_method: doas
|
||||||
roles:
|
roles:
|
||||||
- basic
|
- basic
|
||||||
|
@ -35,7 +36,7 @@
|
||||||
|
|
||||||
- name: narwhal deployment
|
- name: narwhal deployment
|
||||||
hosts: narwhal
|
hosts: narwhal
|
||||||
become: yes
|
become: true
|
||||||
become_method: sudo
|
become_method: sudo
|
||||||
roles:
|
roles:
|
||||||
- basic
|
- basic
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: install python3
|
- name: install python3
|
||||||
apk:
|
apk:
|
||||||
name: python3
|
name: python3
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: install openssh
|
- name: install openssh
|
||||||
apk:
|
apk:
|
||||||
name: openssh
|
name: openssh
|
||||||
|
@ -5,5 +6,5 @@
|
||||||
- name: enable sshd service
|
- name: enable sshd service
|
||||||
service:
|
service:
|
||||||
name: sshd
|
name: sshd
|
||||||
enabled: yes
|
enabled: true
|
||||||
state: started
|
state: started
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: ssh_host_ed25519_key-cert.pub
|
- name: ssh_host_ed25519_key-cert.pub
|
||||||
copy:
|
copy:
|
||||||
src: "host_files/{{ ansible_hostname }}/ssh_host_ed25519_key-cert.pub"
|
src: "host_files/{{ ansible_hostname }}/ssh_host_ed25519_key-cert.pub"
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: set sshd config
|
- name: set sshd config
|
||||||
template:
|
template:
|
||||||
src: sshd_config.j2
|
src: sshd_config.j2
|
||||||
|
|
|
@ -2,6 +2,7 @@
|
||||||
# * curl icanhazip.com
|
# * curl icanhazip.com
|
||||||
# * http_proxy=caladan:8888 curl icanhazip.com
|
# * http_proxy=caladan:8888 curl icanhazip.com
|
||||||
|
|
||||||
|
---
|
||||||
- name: install tinyproxy
|
- name: install tinyproxy
|
||||||
apk:
|
apk:
|
||||||
name: tinyproxy
|
name: tinyproxy
|
||||||
|
@ -19,7 +20,7 @@
|
||||||
service:
|
service:
|
||||||
name: tinyproxy
|
name: tinyproxy
|
||||||
state: started
|
state: started
|
||||||
enabled: yes
|
enabled: true
|
||||||
when: ansible_distribution == "Alpine"
|
when: ansible_distribution == "Alpine"
|
||||||
|
|
||||||
- name: set awall firewall rule
|
- name: set awall firewall rule
|
||||||
|
@ -35,5 +36,5 @@
|
||||||
awall:
|
awall:
|
||||||
name: tinyproxy
|
name: tinyproxy
|
||||||
state: enabled
|
state: enabled
|
||||||
activate: yes
|
activate: true
|
||||||
when: ansible_distribution == "Alpine"
|
when: ansible_distribution == "Alpine"
|
||||||
|
|
|
@ -1,2 +1,3 @@
|
||||||
|
---
|
||||||
dependencies:
|
dependencies:
|
||||||
- role: wheel
|
- role: wheel
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: create group 'ansible'
|
- name: create group 'ansible'
|
||||||
group:
|
group:
|
||||||
name: ansible
|
name: ansible
|
||||||
|
@ -12,7 +13,7 @@
|
||||||
password: "*" # disabled password but can be accessed with SSH
|
password: "*" # disabled password but can be accessed with SSH
|
||||||
groups:
|
groups:
|
||||||
- wheel
|
- wheel
|
||||||
append: yes
|
append: true
|
||||||
|
|
||||||
- name: make sure ansible owns its home
|
- name: make sure ansible owns its home
|
||||||
file:
|
file:
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: create group 'deploy'
|
- name: create group 'deploy'
|
||||||
group:
|
group:
|
||||||
name: deploy
|
name: deploy
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: create group 'rilla'
|
- name: create group 'rilla'
|
||||||
group:
|
group:
|
||||||
name: rilla
|
name: rilla
|
||||||
|
@ -12,13 +13,13 @@
|
||||||
groups:
|
groups:
|
||||||
- deploy
|
- deploy
|
||||||
- wheel
|
- wheel
|
||||||
append: yes
|
append: true
|
||||||
|
|
||||||
- name: additional groups to rilla
|
- name: additional groups to rilla
|
||||||
user:
|
user:
|
||||||
name: rilla
|
name: rilla
|
||||||
groups: "{{item}}"
|
groups: "{{item}}"
|
||||||
append: yes
|
append: true
|
||||||
when: item in ansible_facts.getent_group
|
when: item in ansible_facts.getent_group
|
||||||
with_items:
|
with_items:
|
||||||
- docker
|
- docker
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: create group 'woodpecker'
|
- name: create group 'woodpecker'
|
||||||
group:
|
group:
|
||||||
name: woodpecker
|
name: woodpecker
|
||||||
|
@ -12,13 +13,13 @@
|
||||||
password: "*" # disabled password but can be accessed with SSH
|
password: "*" # disabled password but can be accessed with SSH
|
||||||
groups:
|
groups:
|
||||||
- deploy
|
- deploy
|
||||||
append: yes
|
append: true
|
||||||
|
|
||||||
- name: additional groups to woodpecker
|
- name: additional groups to woodpecker
|
||||||
user:
|
user:
|
||||||
name: woodpecker
|
name: woodpecker
|
||||||
groups: "{{item}}"
|
groups: "{{item}}"
|
||||||
append: yes
|
append: true
|
||||||
when: item in ansible_facts.getent_group
|
when: item in ansible_facts.getent_group
|
||||||
with_items:
|
with_items:
|
||||||
- docker
|
- docker
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: install doas
|
- name: install doas
|
||||||
apk:
|
apk:
|
||||||
name: doas
|
name: doas
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: create 'wheel' group
|
- name: create 'wheel' group
|
||||||
group:
|
group:
|
||||||
name: wheel
|
name: wheel
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: install sudo
|
- name: install sudo
|
||||||
apt:
|
apt:
|
||||||
name: sudo
|
name: sudo
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
- name: install wpa-supplicant (alpine)
|
- name: install wpa-supplicant (alpine)
|
||||||
apk:
|
apk:
|
||||||
name: wpa_supplicant
|
name: wpa_supplicant
|
||||||
|
@ -21,7 +22,7 @@
|
||||||
service:
|
service:
|
||||||
name: wpa_supplicant
|
name: wpa_supplicant
|
||||||
state: started
|
state: started
|
||||||
enabled: yes
|
enabled: true
|
||||||
runlevel: boot
|
runlevel: boot
|
||||||
when: ansible_distribution == "Alpine"
|
when: ansible_distribution == "Alpine"
|
||||||
|
|
||||||
|
@ -29,7 +30,7 @@
|
||||||
service:
|
service:
|
||||||
name: networking
|
name: networking
|
||||||
state: started
|
state: started
|
||||||
enabled: yes
|
enabled: true
|
||||||
runlevel: boot
|
runlevel: boot
|
||||||
when: ansible_distribution == "Alpine"
|
when: ansible_distribution == "Alpine"
|
||||||
|
|
||||||
|
@ -45,6 +46,6 @@
|
||||||
service:
|
service:
|
||||||
name: wpa_cli
|
name: wpa_cli
|
||||||
state: started
|
state: started
|
||||||
enabled: yes
|
enabled: true
|
||||||
runlevel: boot
|
runlevel: boot
|
||||||
when: ansible_distribution == "Alpine"
|
when: ansible_distribution == "Alpine"
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
---
|
||||||
wifi_ssid: CocoPeach
|
wifi_ssid: CocoPeach
|
||||||
|
|
||||||
wifi_psk: !vault |
|
wifi_psk: !vault |
|
||||||
|
|
Loading…
Reference in New Issue