chris
81398e847e
- Updated all tasks to use fully qualified module names (e.g., ansible.builtin.shell, ansible.builtin.copy) for clarity and to avoid ambiguity. - Replaced deprecated 'yum' module with 'dnf' for package management on RedHat-based systems. - Improved formatting and consistency in task definitions, including the use of double quotes for strings and consistent indentation. - Removed unnecessary comments and whitespace to enhance readability. - Ensured that conditions and loops are consistently formatted across all tasks.
329 lines
8.0 KiB
YAML
329 lines
8.0 KiB
YAML
---
|
|
- name: (main.yml) Import show.yml tasks
|
|
ansible.builtin.import_tasks: show.yml
|
|
tags:
|
|
- show
|
|
|
|
# tags supported inside basic.yml
|
|
#
|
|
# timezone
|
|
# locales
|
|
# systemd-nofiles
|
|
- name: (main.yml) Import basic.yml tasks
|
|
ansible.builtin.import_tasks: basic.yml
|
|
tags:
|
|
- basic
|
|
|
|
# tags supported inside apt.yml
|
|
#
|
|
# apt-update
|
|
# apt-upgrade
|
|
# apt-dpkg-configure
|
|
# apt-initial-install
|
|
# apt-microcode
|
|
# apt-compiler-pkgs
|
|
# apt-webserver-pkgs
|
|
# apt-lxc-hosts-pkgs
|
|
# apt-mysql-server-pkgs
|
|
# apt-postgresql-server-pkgs
|
|
# apt-remove
|
|
# apt-autoremove
|
|
# apt-clean
|
|
- name: (main.yml) Import apt.yml tasks
|
|
ansible.builtin.import_tasks: apt.yml
|
|
when:
|
|
- ansible_facts['distribution'] == "Debian"
|
|
tags: apt
|
|
|
|
# tags supported inside extrepo.yml
|
|
#
|
|
# extrepo
|
|
- name: (main.yml) Import extrepo.yml tasks
|
|
ansible.builtin.import_tasks: extrepo.yml
|
|
when:
|
|
- ansible_facts['distribution'] == "Debian"
|
|
- (ansible_facts['distribution_major_version'] | int) >= 12
|
|
tags:
|
|
- extrepo
|
|
|
|
# tags supported inside apt-gateway.yml:
|
|
#
|
|
#
|
|
- name: (main.yml) Import apt-gateway.yml tasks
|
|
ansible.builtin.import_tasks: apt-gateway.yml
|
|
when: inventory_hostname in groups['gateway_server']
|
|
tags:
|
|
- apt
|
|
- apt-gateway-server
|
|
|
|
#
|
|
# yum-update
|
|
# yum-base-install
|
|
# yum-initial-install
|
|
- name: (main.yml) Import yum.yml tasks
|
|
ansible.builtin.import_tasks: yum.yml
|
|
when:
|
|
- ansible_facts.os_family == "RedHat"
|
|
- ansible_facts.distribution == "CentOS" or ansible_facts.distribution == "Fedora"
|
|
tags: yum
|
|
|
|
# tags supportetd inside caching-nameserver.yml
|
|
#
|
|
# apt-caching-nameserver
|
|
# yum-caching-nameserver
|
|
#
|
|
- name: (main.yml) Import caching-nameserver.yml tasks
|
|
ansible.builtin.import_tasks: caching-nameserver.yml
|
|
when: groups['caching_nameserver']|string is search(inventory_hostname)
|
|
tags: caching-nameserver
|
|
|
|
# tags supported inside systemd-resolved.yml
|
|
#
|
|
# systemd-resolved
|
|
- name: (main.yml) Import systemd-resolved.yml tasks
|
|
ansible.builtin.import_tasks: systemd-resolved.yml
|
|
tags:
|
|
- systemd-resolved
|
|
when:
|
|
- ansible_facts['distribution'] == "Debian"
|
|
- ansible_facts['distribution_major_version'] > "11"
|
|
- systemd_resolved is defined and systemd_resolved|bool
|
|
|
|
- name: (main.yml) Import tor.yml tasks
|
|
ansible.builtin.import_tasks: tor.yml
|
|
when:
|
|
- inventory_hostname in groups['mail_server']
|
|
- ansible_facts['distribution'] == "Debian"
|
|
tags:
|
|
- tor-service
|
|
|
|
- name: (main.yml) Import cron.yml tasks
|
|
ansible.builtin.import_tasks: cron.yml
|
|
tags:
|
|
- cron
|
|
|
|
# tags supported inside shell.yml
|
|
#
|
|
# vim-config
|
|
# zsh-config
|
|
#
|
|
- name: (main.yml) Import shell.yml tasks
|
|
ansible.builtin.import_tasks: shell.yml
|
|
when:
|
|
- ansible_facts['distribution'] == "Debian"
|
|
tags:
|
|
- shell-config
|
|
- vim-config
|
|
- zsh-config
|
|
|
|
# tags supported inside users.yml:
|
|
#
|
|
# users-exists
|
|
# groups-exists
|
|
# authorized_key
|
|
# sudo-users
|
|
# insert-ssh-keypair-backup-server
|
|
# keypair-backup-server
|
|
# root-defaut-ssh-keypair
|
|
# insert_root_ssh_public_key
|
|
- name: (main.yml) Import users.yml tasks
|
|
ansible.builtin.import_tasks: users.yml
|
|
tags:
|
|
- users
|
|
|
|
# tags supported inside users-systemfiles.yml:
|
|
#
|
|
# bash
|
|
# profile
|
|
# vim
|
|
- name: (main.yml) Import users-systemfiles.yml tasks
|
|
ansible.builtin.import_tasks: users-systemfiles.yml
|
|
tags:
|
|
- users
|
|
- users-systemfiles
|
|
|
|
# tags supported inside webadmin-user.yml:
|
|
#
|
|
# users-exists
|
|
# groups-exists
|
|
# authorized_key
|
|
# sudo-users
|
|
# webadmin-defaut-ssh-keypair
|
|
# insert_webadmin_ssh_public_key
|
|
- name: (main.yml) Import webadmin-user.yml tasks
|
|
ansible.builtin.import_tasks: webadmin-user.yml
|
|
when: groups['webadmin']|string is search(inventory_hostname)
|
|
tags:
|
|
- users
|
|
- users-systemfiles
|
|
- webadmin
|
|
|
|
# tags supported inside sshd.yml
|
|
#
|
|
# sshd-config
|
|
- name: (main.yml) Import sshd.yml tasks
|
|
ansible.builtin.import_tasks: sshd.yml
|
|
tags: sshd
|
|
|
|
# tags supported inside sudoers.yml:
|
|
#
|
|
# sudoers-remove
|
|
# sudoers-file-configuration
|
|
# sudoers-global-configuration
|
|
- name: (main.yml) Import sudoers.yml tasks
|
|
ansible.builtin.import_tasks: sudoers.yml
|
|
tags: sudoers
|
|
|
|
- name: (main.yml) Import motd.yml tasks
|
|
ansible.builtin.import_tasks: motd.yml
|
|
tags: motd
|
|
|
|
# tags supported inside ntp.yml:
|
|
#
|
|
# ntp-server
|
|
- name: (main.yml) Import ntp.yml tasks
|
|
ansible.builtin.import_tasks: ntp.yml
|
|
tags:
|
|
- ntp
|
|
when:
|
|
- "'lxc_guest' not in group_names"
|
|
|
|
# tags supportetd inside git.yml
|
|
#
|
|
# git-firewall-repository
|
|
# git-default-repositories
|
|
# git-oopen-server-repositories
|
|
# git-warenform-server-repositories
|
|
# git-lxc-host-repositories
|
|
# git-lxc-guest-repositories
|
|
# git-gateway-server-repositories
|
|
# git-apache2-repositories
|
|
# git-nginx-repositories
|
|
# git-mysql-server-repositories
|
|
# git-nextcloud-server-repositories
|
|
# git-postgresql-server-repositories
|
|
# git-dns-server-repositories
|
|
# git-backup-server-repositories
|
|
# git-mailservers-repositories
|
|
# git-sympa-repositories
|
|
# git-other-repositories
|
|
- name: (main.yml) Import git.yml tasks
|
|
ansible.builtin.import_tasks: git.yml
|
|
tags: git
|
|
|
|
# tags supported inside nfs.yml:
|
|
#
|
|
# nfs-server
|
|
# nfs-client
|
|
- name: (main.yml) Import nfs.yml tasks
|
|
ansible.builtin.import_tasks: nfs.yml
|
|
tags:
|
|
- nfs
|
|
|
|
# tags supported inside x2go-server.yml:
|
|
#
|
|
# x2go-server
|
|
- name: (main.yml) Import x2go-server.yml tasks
|
|
ansible.builtin.import_tasks: x2go-server.yml
|
|
when: inventory_hostname in groups['x2go_server']
|
|
tags:
|
|
- x2go
|
|
|
|
# tags supported inside copy_files.yml:
|
|
#
|
|
# copy-files
|
|
# copy-plain-files
|
|
# copy-template-files
|
|
- name: (main.yml) Import copy_files.yml tasks
|
|
ansible.builtin.import_tasks: copy_files.yml
|
|
tags:
|
|
- copy-files
|
|
|
|
# tags supported inside symlink_files.yml:
|
|
#
|
|
# symlink-files
|
|
- name: (main.yml) Import symlink_files.yml tasks
|
|
ansible.builtin.import_tasks: symlink_files.yml
|
|
tags:
|
|
- symlink-files
|
|
|
|
# tags supported inside config_files_mailsystem_scripts.yml:
|
|
#
|
|
- name: (main.yml) Import config_files_mailsystem_scripts.yml tasks
|
|
ansible.builtin.import_tasks: config_files_mailsystem_scripts.yml
|
|
tags:
|
|
- config-files-mailsystem
|
|
|
|
# tags supported inside samba-user.yml:
|
|
#
|
|
# samba-server
|
|
# samba-user
|
|
# system-user
|
|
#
|
|
- name: (main.yml) Import samba-user.yml tasks
|
|
ansible.builtin.import_tasks: samba-user.yml
|
|
when: inventory_hostname in groups['samba_server']
|
|
tags:
|
|
- samba-server
|
|
|
|
# tags supported inside samba-config-server.yml:
|
|
#
|
|
# samba-server
|
|
# samba-shares
|
|
# samba-server
|
|
# samba-cron
|
|
#
|
|
- name: (main.yml) Import samba-config-server.yml tasks
|
|
ansible.builtin.import_tasks: samba-config-server.yml
|
|
when: inventory_hostname in groups['samba_server']
|
|
tags:
|
|
- samba-server
|
|
|
|
# tags supported inside samba-remove-user.yml:
|
|
#
|
|
# samba-server
|
|
# samba-user
|
|
# system-user
|
|
#
|
|
- name: (main.yml) Import samba-remove-user.yml tasks
|
|
ansible.builtin.import_tasks: samba-remove-user.yml
|
|
when: inventory_hostname in groups['samba_server']
|
|
tags:
|
|
- samba-server
|
|
- remove-samba-user
|
|
|
|
- name: (main.yml) Import redis-server.yml tasks
|
|
ansible.builtin.import_tasks: redis-server.yml
|
|
when: inventory_hostname in groups['nextcloud_server'] or
|
|
inventory_hostname in groups['apache2_webserver'] or
|
|
inventory_hostname in groups['nginx_webserver']
|
|
tags:
|
|
- redis-server
|
|
|
|
- name: (main.yml) Import mysql.yml tasks
|
|
ansible.builtin.import_tasks: mysql.yml
|
|
when: groups['mysql_server']|string is search(inventory_hostname)
|
|
tags:
|
|
- mysql
|
|
- mariadb
|
|
|
|
- name: (main.yml) Import apache2.yml tasks
|
|
ansible.builtin.import_tasks: apache2.yml
|
|
when: groups['apache2_webserver']|string is search(inventory_hostname)
|
|
tags:
|
|
- apache2
|
|
|
|
- name: (main.yml) Import systemd-services_debian_based_OS.yml tasks
|
|
ansible.builtin.import_tasks: systemd-services_debian_based_OS.yml
|
|
when:
|
|
- ansible_facts.os_family == "Debian"
|
|
tags:
|
|
- services
|
|
|
|
- name: (main.yml) Import systemd-services_redhat_based_OS.yml tasks
|
|
ansible.builtin.import_tasks: systemd-services_redhat_based_OS.yml
|
|
when:
|
|
- ansible_facts.os_family == "RedHat"
|
|
tags:
|
|
- services
|