Salt
79220bef76
From now on, nightly plays triggered by GitLab will be standard. Desktops will still use an ansible-pull configuration as there is no guarantee that they will be available at 1AM.
39 lines
1.1 KiB
YAML
Executable File
39 lines
1.1 KiB
YAML
Executable File
#!/usr/bin/env ansible-playbook
|
|
# vim:ft=ansible:
|
|
---
|
|
# Preambulatory system configuration
|
|
- hosts: all
|
|
roles:
|
|
- role: common
|
|
tags: [ common ]
|
|
- role: adminuser
|
|
tags: [ adminuser, common ]
|
|
- role: sshd
|
|
vars:
|
|
sshd:
|
|
AcceptEnv: "LANG LC_*"
|
|
ChallengeResponseAuthentication: no
|
|
Compression: yes
|
|
PasswordAuthentication: no
|
|
PermitRootLogin: no
|
|
PrintMotd: no
|
|
PubkeyAuthentication: yes
|
|
Subsystem: "sftp /usr/lib/openssh/sftp-server"
|
|
UsePAM: yes
|
|
X11Forwarding: no
|
|
tags: [ sshd, common ]
|
|
- role: git
|
|
vars:
|
|
git_repos:
|
|
- repo: "{{ ansible_pull_repo }}"
|
|
dest: /etc/ansible
|
|
tags: [ ansible, git, common ]
|
|
# Import specific playbooks
|
|
- import_playbook: playbooks/db.yml
|
|
- import_playbook: playbooks/web.yml
|
|
- import_playbook: playbooks/game.yml
|
|
- import_playbook: playbooks/pis.yml
|
|
- import_playbook: playbooks/pistorage.yml
|
|
- import_playbook: playbooks/pik8s.yml
|
|
- import_playbook: playbooks/desktop.yml
|