clean up
This commit is contained in:
+3
-110
@@ -43,26 +43,6 @@
|
|||||||
system: true
|
system: true
|
||||||
gid: 701
|
gid: 701
|
||||||
|
|
||||||
# - name: Make sure /etc/sudoers.d exists
|
|
||||||
# become: true
|
|
||||||
# ansible.builtin.file:
|
|
||||||
# path: /etc/sudoers.d
|
|
||||||
# state: directory
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
# mode: u=rwx,go=
|
|
||||||
|
|
||||||
# - name: Get /etc/sudoers.d/hpf
|
|
||||||
# become: true
|
|
||||||
# ansible.builtin.copy:
|
|
||||||
# src: etc/sudoers.d/hpf
|
|
||||||
# dest: /etc/sudoers.d/hpf
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
# mode: u=rw,go=
|
|
||||||
# backup: true
|
|
||||||
# validate: /usr/sbin/visudo -csf %s
|
|
||||||
|
|
||||||
- name: Get /etc/sudoers.d
|
- name: Get /etc/sudoers.d
|
||||||
become: true
|
become: true
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
@@ -75,28 +55,8 @@
|
|||||||
backup: true
|
backup: true
|
||||||
validate: /usr/sbin/visudo -csf %s
|
validate: /usr/sbin/visudo -csf %s
|
||||||
|
|
||||||
#### Configure sshd
|
|
||||||
|
|
||||||
# - name: Make sure /etc/ssh/sshd_config.d exists
|
#### Configure sshd
|
||||||
# become: true
|
|
||||||
# ansible.builtin.file:
|
|
||||||
# path: /etc/ssh/sshd_config.d
|
|
||||||
# state: directory
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
# mode: u=rwx,go=rx
|
|
||||||
#
|
|
||||||
# - name: Get /etc/ssh/sshd_config.d/hpf.conf
|
|
||||||
# become: true
|
|
||||||
# ansible.builtin.copy:
|
|
||||||
# src: etc/ssh/sshd_config.d/hpf.conf
|
|
||||||
# dest: /etc/ssh/sshd_config.d/hpf.conf
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
# mode: u=rwx,go=rx
|
|
||||||
# backup: true
|
|
||||||
# validate: /usr/sbin/sshd -t -f %s
|
|
||||||
# notify: Restart sshd
|
|
||||||
|
|
||||||
- name: Get /etc/ssh/sshd_config.d
|
- name: Get /etc/ssh/sshd_config.d
|
||||||
become: true
|
become: true
|
||||||
@@ -111,56 +71,9 @@
|
|||||||
validate: /usr/sbin/sshd -t -f %s
|
validate: /usr/sbin/sshd -t -f %s
|
||||||
notify: Restart sshd
|
notify: Restart sshd
|
||||||
|
|
||||||
|
|
||||||
#### Configure /etc/skel
|
#### Configure /etc/skel
|
||||||
|
|
||||||
# - name: Make sure /etc/skel/.profile.d exists
|
|
||||||
# become: true
|
|
||||||
# ansible.builtin.file:
|
|
||||||
# path: /etc/skel/.profile.d
|
|
||||||
# state: directory
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
# mode: u=rwx,go=
|
|
||||||
|
|
||||||
# - name: Get /etc/skel/.profile.d/ansible-venv.sh
|
|
||||||
# become: true
|
|
||||||
# ansible.builtin.copy:
|
|
||||||
# src: etc/skel/.profile.d/ansible-venv.sh
|
|
||||||
# dest: /etc/skel/.profile.d/ansible-venv.sh
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
# mode: u=rw,go=
|
|
||||||
# backup: true
|
|
||||||
|
|
||||||
# - name: Get /etc/skel/.profile
|
|
||||||
# become: true
|
|
||||||
# ansible.builtin.copy:
|
|
||||||
# src: etc/skel/.profile
|
|
||||||
# dest: /etc/skel/.profile
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
# mode: u=rw,go=
|
|
||||||
# backup: true
|
|
||||||
|
|
||||||
# - name: Make sure /etc/skel/.bashrc.d exists
|
|
||||||
# become: true
|
|
||||||
# ansible.builtin.file:
|
|
||||||
# path: /etc/skel/.bashrc.d
|
|
||||||
# state: directory
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
# mode: u=rwx,go=
|
|
||||||
|
|
||||||
# - name: Get /etc/skel/.bashrc
|
|
||||||
# become: true
|
|
||||||
# ansible.builtin.copy:
|
|
||||||
# src: etc/skel/.bashrc
|
|
||||||
# dest: /etc/skel/.bashrc
|
|
||||||
# owner: root
|
|
||||||
# group: root
|
|
||||||
# mode: u=rw,go=
|
|
||||||
# backup: true
|
|
||||||
|
|
||||||
- name: Get /etc/skel
|
- name: Get /etc/skel
|
||||||
become: true
|
become: true
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
@@ -172,6 +85,7 @@
|
|||||||
mode: u=rw,go=
|
mode: u=rw,go=
|
||||||
backup: true
|
backup: true
|
||||||
|
|
||||||
|
|
||||||
#### User: root
|
#### User: root
|
||||||
|
|
||||||
- name: Set root's authorized_keys
|
- name: Set root's authorized_keys
|
||||||
@@ -314,27 +228,6 @@
|
|||||||
|
|
||||||
#### ansible-pull.sh
|
#### ansible-pull.sh
|
||||||
|
|
||||||
# - name: Make sure /home/hpf-ans/bin exists
|
|
||||||
# become: true
|
|
||||||
# become_user: hpf-ans
|
|
||||||
# ansible.builtin.file:
|
|
||||||
# path: $HOME/bin
|
|
||||||
# state: directory
|
|
||||||
# owner: hpf-ans
|
|
||||||
# group: hpf-ans
|
|
||||||
# mode: u=rwx,go=
|
|
||||||
|
|
||||||
# - name: Get /home/hpf-ans/bin/ansible-pull.sh
|
|
||||||
# become: true
|
|
||||||
# become_user: hpf-ans
|
|
||||||
# ansible.builtin.copy:
|
|
||||||
# src: home/hpf-ans/bin/ansible-pull.sh
|
|
||||||
# dest: $HOME/bin/ansible-pull.sh
|
|
||||||
# owner: hpf-ans
|
|
||||||
# group: hpf-ans
|
|
||||||
# mode: u=rwx,go=
|
|
||||||
# backup: true
|
|
||||||
|
|
||||||
- name: Make sure log directory exists
|
- name: Make sure log directory exists
|
||||||
become: true
|
become: true
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
|
|||||||
+1
-3
@@ -7,9 +7,7 @@ Manually on each system:
|
|||||||
iris.heath.hpetersenfamily.com admin-a.hpetersenfamily.com core.mary.hpetersenfamily.com
|
iris.heath.hpetersenfamily.com admin-a.hpetersenfamily.com core.mary.hpetersenfamily.com
|
||||||
|
|
||||||
* ansible-pull.sh
|
* ansible-pull.sh
|
||||||
* debug flag to print to stdout
|
* debug flag to print to stdout and increase verbosity
|
||||||
* bootstrap.yml
|
|
||||||
* change to copy files/home/hpf-ans/bin with all it's contents
|
|
||||||
|
|
||||||
|
|
||||||
heath
|
heath
|
||||||
|
|||||||
Reference in New Issue
Block a user