71 lines
1.6 KiB
Plaintext
71 lines
1.6 KiB
Plaintext
|
|
******** CHANGE PASSWORDS ********
|
|
* Bitwarden MASTER
|
|
* Google - heathpetersen@hpetersenfamily.com
|
|
* Google - heathpetersen@kandre.com
|
|
* heath account on iris, admin-a, core
|
|
* first account ssh key
|
|
* heath account ssh key
|
|
* root account (UNIQUE) on iris, admin-a, core
|
|
* set ! as encrypted shadow password on hpf-ans on iris, admin-a, core
|
|
|
|
# Change to work with multiple distros (nothing hardcoded)
|
|
|
|
* create production, development branches
|
|
* cron job for ansible-pull
|
|
|
|
|
|
|
|
* Configure hosts
|
|
# cat >>/etc/hosts <<!!TheEnd!!
|
|
|
|
127.0.0.1 name.f.q.d.n name-ipv4.f.q.d.n name name-ipv4
|
|
::1 name.f.q.d.n name-ipv6.f.q.d.n name name-ipv6
|
|
!!TheEnd!!
|
|
|
|
|
|
##########
|
|
########## normal tasks
|
|
##########
|
|
|
|
- name: Install openssh, openssh-server, openssh-sftp-server
|
|
ansible.builtin.apt:
|
|
pkg:
|
|
- openssh
|
|
- openssh-server
|
|
- openssh-sftp-server
|
|
|
|
- name: Install bash, bash-completion
|
|
ansible.builtin.apt:
|
|
pkg:
|
|
- bash
|
|
- bash-completion
|
|
|
|
- name: Install chrony
|
|
ansible.builtin.apt:
|
|
pkg:
|
|
- chrony
|
|
|
|
#- name: Set host name
|
|
# ansible.builtin.hostname:
|
|
# name: ## Fully qualified domain name ##
|
|
# use: systemd
|
|
|
|
* Configure chrony
|
|
# cat >/etc/chrony/sources.d/hpetersenfamily-north-america.sources <<!!TheEnd!!
|
|
pool 0.north-america.pool.ntp.org iburst
|
|
!!TheEnd!!
|
|
|
|
|
|
~heath/.gitconfig
|
|
|
|
fail2ban
|
|
uptime kuma
|
|
|
|
==============================================================
|
|
==============================================================
|
|
==============================================================
|
|
|
|
use tags to do things like allow selecting software updates, software cleanup, etc.
|
|
|