alanorth
/
ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity
ansible-personal/roles/common/tasks/main.yml

35 lines
979 B
YAML
Raw Normal View History

Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
---
Adjust playbooks for Ansible 2.4 import changes Ansible 2.4 changes the way includes work. Now you have to use "import" for playbooks and tasks that are static, and "include" for those that are dynamic (ie, those that use variables, loops, etc). See: http://docs.ansible.com/ansible/devel/playbooks_reuse_includes.html
2017-09-21 20:30:47 +02:00
- import_tasks: ntp.yml
roles/common: Use systemd's timedatectl for time stuff Debian 8 and Ubuntu 16.04 use systemd, so we can make use of its NTP stuff rather than using the standalone `ntp` package.
2016-06-27 09:30:11 +02:00
tags: ntp
Adjust playbooks for Ansible 2.4 import changes Ansible 2.4 changes the way includes work. Now you have to use "import" for playbooks and tasks that are static, and "include" for those that are dynamic (ie, those that use variables, loops, etc). See: http://docs.ansible.com/ansible/devel/playbooks_reuse_includes.html
2017-09-21 20:30:47 +02:00
- include_tasks: packages_{{ ansible_distribution }}.yml
roles/common: Add playbook for Debian packages Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-07-24 18:52:54 +02:00
tags: packages
roles/common: Rename "iptables" task to "firewall"
2017-09-26 13:32:21 +02:00
- include_tasks: firewall_{{ ansible_distribution }}.yml
roles/common: Move tags from subtask to main one Child tasks inherit the tag of the parent. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-03-15 15:33:48 +01:00
tags: firewall
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
Adjust playbooks for Ansible 2.4 import changes Ansible 2.4 changes the way includes work. Now you have to use "import" for playbooks and tasks that are static, and "include" for those that are dynamic (ie, those that use variables, loops, etc). See: http://docs.ansible.com/ansible/devel/playbooks_reuse_includes.html
2017-09-21 20:30:47 +02:00
- import_tasks: sshd.yml
roles/common: Add DSA/ECDSA cleanup to ssh tasks We don't want to support these signature algorithms! Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-01-20 14:28:06 +01:00
tags: sshd
roles/common: Add sysctl template for Debian hosts Note: I've only tested this on a Debian container, and you can't set these sysctls on containers (the host controls them). To make matters worse, there is no fact to make ansible skip this on hosts that are running in containers. For now I will just skip it on hosts that are "virtualization" servers... even though we actually do have KVM running on Debian on real hardware. *sigh* Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-08-22 23:12:17 +02:00
# containers identify as virtualization hosts, which makes this tricky, because we have actual Debian VM hosts!
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
- name: Reconfigure /etc/sysctl.conf
roles/common: Add sysctl template for Debian hosts Note: I've only tested this on a Debian container, and you can't set these sysctls on containers (the host controls them). To make matters worse, there is no fact to make ansible skip this on hosts that are running in containers. For now I will just skip it on hosts that are "virtualization" servers... even though we actually do have KVM running on Debian on real hardware. *sigh* Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-08-22 23:12:17 +02:00
when: ansible_virtualization_role != 'host'
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
template: src=sysctl_{{ ansible_distribution }}.j2 dest=/etc/sysctl.conf owner=root group=root mode=0644
notify:
roles/common: Indent some yaml stuff in main.yml Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-03-15 15:31:29 +01:00
- reload sysctl
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
tags: sysctl
- name: Reconfigure /etc/rc.local
roles/common: Fix one logic mistake in rc.local task I think it was originally supposed to be `ansible_os_family` but we don't have anything other than Ubuntu, so let's just use that. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-03-15 15:43:21 +01:00
when: ansible_distribution == 'Ubuntu'
roles/common: Don't use ansible facts when we don't need to No use testing the distro version only to use an ansible fact to find the correct template.
2016-08-24 09:11:13 +02:00
template: src=rc.local_Ubuntu.j2 dest=/etc/rc.local owner=root group=root mode=0755
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
roles/common: Set I/O scheduler via udev All servers with non-rotating disks (SSDs) should be running noop, and the rest should be running deadline. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-03-15 15:52:05 +01:00
- name: Set I/O scheduler
template: src=etc/udev/rules.d/60-scheduler.rules.j2 dest=/etc/udev/rules.d/60-scheduler.rules owner=root group=root mode=0644
tags: udev
Adjust playbooks for Ansible 2.4 import changes Ansible 2.4 changes the way includes work. Now you have to use "import" for playbooks and tasks that are static, and "include" for those that are dynamic (ie, those that use variables, loops, etc). See: http://docs.ansible.com/ansible/devel/playbooks_reuse_includes.html
2017-09-21 20:30:47 +02:00
- import_tasks: ssh-keys.yml
roles/common: Add functionality to copy user keys to provisioning user Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-10-11 11:13:45 +02:00
tags: ssh-keys
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
# vim: set sw=2 ts=2: