revert from lint

This commit is contained in:
2022-11-19 12:05:40 -06:00
parent e4091d16a1
commit be93b28035
14 changed files with 180 additions and 172 deletions

View File

@@ -1,57 +1,58 @@
---
- name: Run Package tasks
ansible.builtin.include_tasks:
include_tasks:
file: ./templates/packages.yml
- name: Create user account
ansible.builtin.user:
user:
name: "{{ username }}"
password: "{{ userpassword }}"
groups: sudo
shell: /bin/bash
state: present
createhome: true
when: ansible_os_family == "Debian"
createhome: yes
when: ansible_os_family == "Debian"
- name: Create user account
ansible.builtin.user:
user:
name: "{{ username }}"
password: "{{ userpassword }}"
shell: /bin/bash
groups: wheel
state: present
createhome: true
when: ansible_os_family == "RedHat"
createhome: yes
when: ansible_os_family == "RedHat"
- name: Run SSH tasks
ansible.builtin.include_tasks:
include_tasks:
file: ssh.yml
- name: Copy unattended-upgrades file
ansible.builtin.copy:
copy:
src: files/10periodic
dest: /etc/apt/apt.conf.d/10periodic
owner: root
group: root
dest: /etc/apt/apt.conf.d/10periodic
owner: root
group: root
mode: "0644"
force: true
when: ansible_os_family == "Debian"
force: yes
when: ansible_os_family == "Debian"
- name: Remove undesirable packages
ansible.builtin.package:
package:
name: "{{ unnecessary_software }}"
state: absent
when: ansible_os_family == "Debian"
when: ansible_os_family == "Debian"
- name: Stop and disable unnecessary services
ansible.builtin.service:
service:
name: "{{ item }}"
state: stopped
enabled: false
enabled: no
with_items: "{{ unnecessary_services }}"
ignore_errors: true
ignore_errors: yes
- name: Set a message of the day
ansible.builtin.copy:
copy:
dest: /etc/motd
src: files/motd
owner: root
@@ -59,7 +60,7 @@
mode: 0644
- name: Set a login banner
ansible.builtin.copy:
copy:
dest: "{{ item }}"
src: files/issue
owner: root
@@ -69,13 +70,13 @@
- /etc/issue
- /etc/issue.net
- name: Set timezone
ansible.builtin.command: timedatectl set-timezone America/Chicago
- name: set timezone
shell: timedatectl set-timezone America/Chicago
- name: Enable cockpit
ansible.builtin.systemd:
systemd:
name: cockpit
daemon_reload: true
daemon_reload: yes
state: restarted
enabled: true
when: ansible_os_family == "RedHat"
enabled: yes
when: ansible_os_family == "RedHat"

View File

@@ -1,50 +1,47 @@
- name: Deploy SSH Key (administrator)
ansible.builtin.copy:
copy:
dest: /home/administrator/.ssh/authorized_keys
src: files/authorized_keys_administrator
mode: "0600"
force: true
force: true
- name: Ensure ssh folder exists for user
ansible.builtin.file:
- name: ensure ssh folder exists for user
file:
path: /home/user/.ssh
mode: "0600"
state: directory
- name: Deploy SSH Key (user)
ansible.builtin.copy:
copy:
dest: /home/user/.ssh/authorized_keys
src: files/authorized_keys_user
mode: "0600"
force: true
force: true
- name: Remove Root SSH Configuration
ansible.builtin.file:
file:
path: /root/.ssh
state: absent
- name: Copy Secured SSHD Configuration
ansible.builtin.copy:
src: files/sshd_config_secured
dest: /etc/ssh/sshd_config
owner: root
group: root
copy:
src: files/sshd_config_secured
dest: /etc/ssh/sshd_config
owner: root
group: root
mode: "0644"
when: ansible_os_family == "Debian"
when: ansible_os_family == "Debian"
- name: Copy Secured SSHD Configuration
ansible.builtin.copy:
src: files/sshd_config_secured_redhat
dest: /etc/ssh/sshd_config
owner: root
group: root
mode: "0644"
when: ansible_os_family == "RedHat"
copy:
src: files/sshd_config_secured_redhat
dest: /etc/ssh/sshd_config
owner: root
group: root
mode: "0644"
when: ansible_os_family == "RedHat"
- name: Restart SSHD
ansible.builtin.systemd:
systemd:
name: sshd
daemon_reload: true
daemon_reload: yes
state: restarted
enabled: true
ignore_errors: true
enabled: yes
ignore_errors: yes