38 lines
927 B
YAML
38 lines
927 B
YAML
|
#!/usr/bin/env ansible-playbook
|
||
|
|
# vim:ft=ansible:
|
||
|
|
---
|
||
|
|
# Preambulatory system configuration
|
||
|
|
- hosts: all
|
||
|
|
tasks:
|
||
|
|
- name: collect service facts
|
||
|
|
service_facts:
|
||
|
|
tags: [ always ]
|
||
|
|
roles:
|
||
|
|
- role: common
|
||
|
|
tags: [ common ]
|
||
|
|
- role: adminuser
|
||
|
|
tags: [ adminuser, common ]
|
||
|
|
- role: docker
|
||
|
|
tags: [ docker, common, skip-pull ]
|
||
|
|
- role: motd
|
||
|
|
vars:
|
||
|
|
motd_watch_services_extra:
|
||
|
|
- docker
|
||
|
|
- kubelet
|
||
|
|
- postgresql
|
||
|
|
tags: [ motd, common ]
|
||
|
|
- role: sshd
|
||
|
|
vars:
|
||
|
|
sshd:
|
||
|
|
AcceptEnv: "LANG LC_*"
|
||
|
|
ChallengeResponseAuthentication: no
|
||
|
|
Compression: yes
|
||
|
|
PasswordAuthentication: no
|
||
|
|
PermitRootLogin: no
|
||
|
|
PrintMotd: no
|
||
|
|
PubkeyAuthentication: yes
|
||
|
|
Subsystem: "sftp /usr/lib/openssh/sftp-server"
|
||
|
|
UsePAM: yes
|
||
|
|
X11Forwarding: no
|
||
|
|
tags: [ sshd, common ]
|