2021-08-26 02:39:17 -05:00
|
|
|
#!/usr/bin/env ansible-playbook
|
|
|
|
|
# vim:ft=ansible:
|
|
|
|
|
---
|
|
|
|
|
# Preambulatory system configuration
|
|
|
|
|
- hosts: all
|
|
|
|
|
tasks:
|
|
|
|
|
- name: collect service facts
|
2022-06-16 23:45:29 -05:00
|
|
|
ansible.builtin.service_facts:
|
2021-08-26 02:39:17 -05:00
|
|
|
tags: [ always ]
|
|
|
|
|
roles:
|
|
|
|
|
- role: common
|
|
|
|
|
tags: [ common ]
|
|
|
|
|
- role: adminuser
|
|
|
|
|
tags: [ adminuser, common ]
|
2021-09-18 16:10:54 -05:00
|
|
|
- role: willshersystems.sshd
|
2021-08-26 02:39:17 -05:00
|
|
|
vars:
|
|
|
|
|
sshd:
|
|
|
|
|
AcceptEnv: "LANG LC_*"
|
|
|
|
|
ChallengeResponseAuthentication: no
|
|
|
|
|
Compression: yes
|
|
|
|
|
PasswordAuthentication: no
|
|
|
|
|
PermitRootLogin: no
|
|
|
|
|
PrintMotd: no
|
|
|
|
|
PubkeyAuthentication: yes
|
|
|
|
|
Subsystem: "sftp /usr/lib/openssh/sftp-server"
|
|
|
|
|
UsePAM: yes
|
|
|
|
|
X11Forwarding: no
|
2022-08-28 11:46:35 -05:00
|
|
|
# We avoid running on "atomic_container" distros since they already ship
|
|
|
|
|
# sshd and since this role doesn't support them
|
|
|
|
|
when: not ansible_pkg_mgr == "atomic_container"
|
2021-08-26 02:39:17 -05:00
|
|
|
tags: [ sshd, common ]
|
2021-11-06 15:56:35 -05:00
|
|
|
- hosts: all:!tags_no-docker
|
2021-11-06 15:53:57 -05:00
|
|
|
roles:
|
|
|
|
|
- role: geerlingguy.docker
|
|
|
|
|
tags: [ docker, common, skip-pull ]
|
