******** CHANGE PASSWORDS ********
* Bitwarden MASTER
* Google - heathpetersen@hpetersenfamily.com
* Google - heathpetersen@kandre.com
* heath account on iris, admin-a, core
* first account ssh key
* heath account ssh key
* root account (UNIQUE) on iris, admin-a, core
* set ! as encrypted shadow password on hpf-ans on iris, admin-a, core

# Change to work with multiple distros (nothing hardcoded)

* create production, development branches
* cron job for ansible-pull



  * Configure hosts
    # cat >>/etc/hosts <<!!TheEnd!!
    
      127.0.0.1 name.f.q.d.n name-ipv4.f.q.d.n name name-ipv4
      ::1       name.f.q.d.n name-ipv6.f.q.d.n name name-ipv6
      !!TheEnd!!


##########
########## normal tasks
##########
  
- name: Install openssh, openssh-server, openssh-sftp-server
  ansible.builtin.apt:
    pkg:
    - openssh
    - openssh-server
    - openssh-sftp-server
    
- name: Install bash, bash-completion
  ansible.builtin.apt:
    pkg:
    - bash
    - bash-completion
    
- name: Install chrony
  ansible.builtin.apt:
    pkg:
    - chrony
  
#- name: Set host name
#  ansible.builtin.hostname:
#    name: ## Fully qualified domain name ##
#    use: systemd
  
  * Configure chrony
    # cat >/etc/chrony/sources.d/hpetersenfamily-north-america.sources <<!!TheEnd!!
      pool 0.north-america.pool.ntp.org iburst
      !!TheEnd!!
  

~heath/.gitconfig

fail2ban
uptime kuma

==============================================================
==============================================================
==============================================================

use tags to do things like allow selecting software updates, software cleanup, etc.