Add monitored role

Day-01/playbook.yml

@@ -1,12 +0,0 @@
----
-- hosts: localhost
-  tasks:
-
-  - name: 'Call "id"'
-    command: id
-
-  - name: Copy a file
-    copy: src=test.txt dest=/tmp/test.txt backup=yes
-
-  - name: 'Call "cat /tmp/test.txt"'
-    command: cat /tmp/test.txt

dokuwiki_inventory.yml

@@ -0,0 +1,5 @@
+---
+- hosts: all
+  roles:
+    - dokuwiki_inventory
+

grep.yml

@@ -0,0 +1,14 @@
+---
+- hosts: localhost
+  tasks:
+    - command: "grep {{ username }} /etc/passwd"
+      register: result
+      ignore_errors: True
+
+    - debug:
+        msg: '{{ username }} exists'
+      when: result is success
+
+    - debug:
+        msg: '{{ username }} does not exist'
+      when: result is failed

group_vars/apt.yml

@@ -1,7 +1,2 @@
-ntp_servers:
-  - 0.debian.pool.ntp.org
-  - 1.debian.pool.ntp.org
-  - 2.debian.pool.ntp.org
-
 ntp_package_name : ntp
 ntp_service_name : ntp

host_vars/tn8-devuan9.yml

@@ -0,0 +1,2 @@
+---
+ssh_service_name: ssh

inventory/hosts

@@ -14,8 +14,8 @@ tn8-suse151 ansible_host=192.168.1.178
 tn8-ubu1604 ansible_host=192.168.1.170
 tn8-ubu1804 ansible_host=192.168.1.135
 tn8-ubu2004 ansible_host=192.168.1.185
-[void]
-tn8-void ansible_host=192.168.1.149
+#[void]
+#tn8-void ansible_host=192.168.1.149
 [apt:children]
 debian
 devuan
@@ -23,7 +23,7 @@ ubuntu
 [nosysd:children]
 alpine
 devuan
-void
+#void
 [sysd:children]
 centos
 debian

loop_include.yml

@@ -0,0 +1,9 @@
+---
+- hosts: localhost
+  tasks:
+    - include: loop_include_sub.yml
+      loop:
+        - A
+        - B
+      loop_control:
+        loop_var: outer

loop_include_sub.yml

@@ -0,0 +1,8 @@
+---
+- debug: "msg='{{ my_idx }} Innen: {{ item }}, Außen: {{ outer }}'"
+  loop:
+    - 1
+    - 2
+  loop_control:
+    index_var: my_idx
+    label: "Testytest"

monitored.yml

@@ -0,0 +1,7 @@
+---
+- hosts: all
+  vars:
+    monitored_by_ssh: True
+    monitored_by_nrpe: True
+  roles:
+    - monitored

ntp.yml

@@ -1,29 +0,0 @@
----
-- hosts: sysd
-
-  tasks:
-
-    - name: Install NTP
-      package:
-        name: "{{ ntp_package_name }}"
-        state: latest
-
-    - name: Template Config
-      template:
-        src: "{{ ntp_package_name }}.conf.j2"
-        dest: "/etc/{{ ntp_package_name  }}.conf"
-        mode: 0644
-        owner: root
-        group: root
-        backup: yes
-
-    - name: Restart Service
-      service:
-        name: "{{ ntp_service_name }}"
-        state: restarted
-
-    - name: Ensure Running
-      service:
-        name: "{{ ntp_service_name }}"
-        state: started
-        enabled: yes

playbook.yml

@@ -0,0 +1,9 @@
+---
+- hosts: all
+  roles:
+    - hosts
+    - ssh-keyonly
+
+- hosts: sysd
+  roles:
+    - ntp

roles/dokuwiki_inventory/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+doku_path: /var/lib/dokuwiki/data/pages/inventory

roles/dokuwiki_inventory/tasks/main.yml

@@ -0,0 +1,21 @@
+---
+- name: Create Inventory Folder
+  local_action:
+    module: file
+    path: "{{ doku_path }}"
+    state: directory
+    mode: 0755
+  run_once: True
+
+- name: Write Wiki Page
+  local_action:
+    module: template
+    src: host.j2
+    dest: "{{ doku_path }}/{{ inventory_hostname }}.txt"
+
+- name: Write Index Page
+  local_action:
+    module: template
+    src: start.j2
+    dest: "{{ doku_path }}/start.txt"
+  run_once: True

roles/dokuwiki_inventory/templates/host.j2

@@ -0,0 +1,32 @@
+====== {{ inventory_hostname }} ======
+  * FQDN: {{ ansible_fqdn }} -- {{ ansible_default_ipv4.address }}
+  * Product: **{{ ansible_system_vendor|default("N/A") }}** {{ ansible_product_name|default("N/A") }} (S/N: {{ ansible_product_serial }}), {{ ansible_form_factor }}
+  * Virtualization: {{ ansible_virtualization_role }} / {{ ansible_virtualization_type }}
+  * CPUs: {{ ansible_processor_vcpus }} ( {{ ansible_processor_count }} x {{ ansible_processor_cores }} Cores x {{ ansible_processor_threads_per_core }} Threads )
+  * CPU-Type: {{ ansible_processor[2] }}
+  * RAM: {{ ansible_memtotal_mb }} MB
+  * Swap: {{ "%0.2f" % (ansible_swaptotal_mb / 1024) }} GB
+  * OS: {{ ansible_distribution }} {{ ansible_distribution_version }}
+  * Kernel: {{ ansible_kernel }}
+  * Init: {{ ansible_service_mgr }}
+  * IPs:
+    * IPv4: {{ ansible_all_ipv4_addresses|join(', ') }}
+    * IPv6: {{ ansible_all_ipv6_addresses|join(', ') }}
+
+
+Mountpoints:
+| Source | Mountpoint | Filesystem |
+{% for m in ansible_mounts %}
+| ''{{ m.device }}'' | ''{{ m.mount }}'' | ''{{ m.fstype }}'' |
+{% endfor %}
+
+  * AppArmor: {{ ansible_apparmor.status }}
+  * SE-Linux: {{ ansible_selinux.status }}
+  * SSH-Host-Keys:
+    * DSA: ''{{ ansible_ssh_host_key_dsa_public|default("N/A") }}''
+    * RSA: ''{{ ansible_ssh_host_key_rsa_public|default("N/A") }}''
+    * ECDSA: ''{{ ansible_ssh_host_key_ecdsa_public|default("N/A") }}''
+    * Ed25519: ''{{ ansible_ssh_host_key_ed25519_public|default("N/A") }}''
+
+----
+//{{ ansible_managed }}//

roles/dokuwiki_inventory/templates/start.j2

@@ -0,0 +1,4 @@
+{% for h in hostvars|sort %}
+  * [[ {{ h }} ]]
+{% endfor %}
+

roles/epel

@@ -0,0 +1 @@
+Subproject commit c5d6c7fd84999febc117e5b97a78d63158d56912

roles/hosts/tasks/main.yml

@@ -0,0 +1,27 @@
+---
+- name: Detect domain name
+  set_fact:
+    domainname: "{{ ansible_dns.domain|default(False) or ansible_dns.search.0|default(False) or ansible_domain|default(False) or 'invalid'}}"
+
+- name: Add name/IP to hosts file
+  lineinfile:
+    dest: /etc/hosts
+    regexp: '^{{ ansible_default_ipv4.address }}'
+    line: '{{ ansible_default_ipv4.address }} {{ ansible_hostname }}.{{ domainname }} {{ ansible_hostname }}'
+    backup: yes
+
+- name: Clean/remove 127.0.1.1
+  lineinfile:
+    dest: /etc/hosts
+    regexp: '^127.0.1.1'
+    state: absent
+    backup: yes
+
+- name: Ensure 127.0.0.1 localhost
+  lineinfile:
+    dest: /etc/hosts
+    regexp: '127.0.0.1'
+    line: '127.0.0.1 localhost localhost.localdomain'
+    insertbefore: BOF
+    backup: yes
+

roles/monitored

@@ -0,0 +1 @@
+Subproject commit 22b2fd3c3a5f631e4e5c2adb67798af91cedc550

roles/ntp/defaults/main.yml

@@ -0,0 +1,4 @@
+ntp_servers:
+  - 0.debian.pool.ntp.org
+  - 1.debian.pool.ntp.org
+  - 2.debian.pool.ntp.org

roles/ntp/tasks/main.yml

@@ -0,0 +1,25 @@
+---
+- name: Install NTP
+  package:
+    name: "{{ ntp_package_name }}"
+    state: latest
+
+- name: Template Config
+  template:
+    src: "etc/{{ ntp_package_name }}.conf.j2"
+    dest: "/etc/{{ ntp_package_name  }}.conf"
+    mode: 0644
+    owner: root
+    group: root
+    backup: yes
+
+- name: Restart Service
+  service:
+    name: "{{ ntp_service_name }}"
+    state: restarted
+
+- name: Ensure Running
+  service:
+    name: "{{ ntp_service_name }}"
+    state: started
+    enabled: yes

roles/ssh-keyonly/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+ssh_service_name: sshd

roles/ssh-keyonly/tasks/main.yml

@@ -0,0 +1,18 @@
+---
+- name: "Set «PermitRootLogin» to «without-password»"
+  lineinfile:
+    dest: /etc/ssh/sshd_config
+    regexp: '^#? *PermitRootLogin'
+    line: "PermitRootLogin without-password"
+    backup: yes
+  register: sshconfigchanged
+
+
+- name: Restart sshd
+  service:
+    name: "{{ ssh_service_name }}"
+    state: restarted
+    sleep: 5
+  when: sshconfigchanged is changed
+
+