Compare commits

..

No commits in common. 'playbooks_structures' and 'master' have entirely different histories.

  1. 12
      Day-01/playbook.yml
  2. 0
      chrony.conf.j2
  3. 5
      dokuwiki_inventory.yml
  4. 14
      grep.yml
  5. 5
      group_vars/apt.yml
  6. 2
      host_vars/tn8-devuan9.yml
  7. 6
      inventory/hosts
  8. 9
      loop_include.yml
  9. 8
      loop_include_sub.yml
  10. 0
      ntp.conf.j2
  11. 29
      ntp.yml
  12. 9
      playbook.yml
  13. 2
      roles/dokuwiki_inventory/defaults/main.yml
  14. 21
      roles/dokuwiki_inventory/tasks/main.yml
  15. 32
      roles/dokuwiki_inventory/templates/host.j2
  16. 4
      roles/dokuwiki_inventory/templates/start.j2
  17. 27
      roles/hosts/tasks/main.yml
  18. 4
      roles/ntp/defaults/main.yml
  19. 25
      roles/ntp/tasks/main.yml
  20. 2
      roles/ssh-keyonly/defaults/main.yml
  21. 18
      roles/ssh-keyonly/tasks/main.yml

@ -0,0 +1,12 @@
---
- hosts: localhost
tasks:
- name: 'Call "id"'
command: id
- name: Copy a file
copy: src=test.txt dest=/tmp/test.txt backup=yes
- name: 'Call "cat /tmp/test.txt"'
command: cat /tmp/test.txt

@ -1,5 +0,0 @@
---
- hosts: all
roles:
- dokuwiki_inventory

@ -1,14 +0,0 @@
---
- hosts: localhost
tasks:
- command: "grep {{ username }} /etc/passwd"
register: result
ignore_errors: True
- debug:
msg: '{{ username }} exists'
when: result is success
- debug:
msg: '{{ username }} does not exist'
when: result is failed

@ -1,2 +1,7 @@
ntp_servers:
- 0.debian.pool.ntp.org
- 1.debian.pool.ntp.org
- 2.debian.pool.ntp.org
ntp_package_name : ntp
ntp_service_name : ntp

@ -1,2 +0,0 @@
---
ssh_service_name: ssh

@ -14,8 +14,8 @@ tn8-suse151 ansible_host=192.168.1.178
tn8-ubu1604 ansible_host=192.168.1.170
tn8-ubu1804 ansible_host=192.168.1.135
tn8-ubu2004 ansible_host=192.168.1.185
#[void]
#tn8-void ansible_host=192.168.1.149
[void]
tn8-void ansible_host=192.168.1.149
[apt:children]
debian
devuan
@ -23,7 +23,7 @@ ubuntu
[nosysd:children]
alpine
devuan
#void
void
[sysd:children]
centos
debian

@ -1,9 +0,0 @@
---
- hosts: localhost
tasks:
- include: loop_include_sub.yml
loop:
- A
- B
loop_control:
loop_var: outer

@ -1,8 +0,0 @@
---
- debug: "msg='{{ my_idx }} Innen: {{ item }}, Außen: {{ outer }}'"
loop:
- 1
- 2
loop_control:
index_var: my_idx
label: "Testytest"

@ -0,0 +1,29 @@
---
- hosts: sysd
tasks:
- name: Install NTP
package:
name: "{{ ntp_package_name }}"
state: latest
- name: Template Config
template:
src: "{{ ntp_package_name }}.conf.j2"
dest: "/etc/{{ ntp_package_name }}.conf"
mode: 0644
owner: root
group: root
backup: yes
- name: Restart Service
service:
name: "{{ ntp_service_name }}"
state: restarted
- name: Ensure Running
service:
name: "{{ ntp_service_name }}"
state: started
enabled: yes

@ -1,9 +0,0 @@
---
- hosts: all
roles:
- hosts
- ssh-keyonly
- hosts: sysd
roles:
- ntp

@ -1,2 +0,0 @@
---
doku_path: /var/lib/dokuwiki/data/pages/inventory

@ -1,21 +0,0 @@
---
- name: Create Inventory Folder
local_action:
module: file
path: "{{ doku_path }}"
state: directory
mode: 0755
run_once: True
- name: Write Wiki Page
local_action:
module: template
src: host.j2
dest: "{{ doku_path }}/{{ inventory_hostname }}.txt"
- name: Write Index Page
local_action:
module: template
src: start.j2
dest: "{{ doku_path }}/start.txt"
run_once: True

@ -1,32 +0,0 @@
====== {{ inventory_hostname }} ======
* FQDN: {{ ansible_fqdn }} -- {{ ansible_default_ipv4.address }}
* Product: **{{ ansible_system_vendor|default("N/A") }}** {{ ansible_product_name|default("N/A") }} (S/N: {{ ansible_product_serial }}), {{ ansible_form_factor }}
* Virtualization: {{ ansible_virtualization_role }} / {{ ansible_virtualization_type }}
* CPUs: {{ ansible_processor_vcpus }} ( {{ ansible_processor_count }} x {{ ansible_processor_cores }} Cores x {{ ansible_processor_threads_per_core }} Threads )
* CPU-Type: {{ ansible_processor[2] }}
* RAM: {{ ansible_memtotal_mb }} MB
* Swap: {{ "%0.2f" % (ansible_swaptotal_mb / 1024) }} GB
* OS: {{ ansible_distribution }} {{ ansible_distribution_version }}
* Kernel: {{ ansible_kernel }}
* Init: {{ ansible_service_mgr }}
* IPs:
* IPv4: {{ ansible_all_ipv4_addresses|join(', ') }}
* IPv6: {{ ansible_all_ipv6_addresses|join(', ') }}
Mountpoints:
| Source | Mountpoint | Filesystem |
{% for m in ansible_mounts %}
| ''{{ m.device }}'' | ''{{ m.mount }}'' | ''{{ m.fstype }}'' |
{% endfor %}
* AppArmor: {{ ansible_apparmor.status }}
* SE-Linux: {{ ansible_selinux.status }}
* SSH-Host-Keys:
* DSA: ''{{ ansible_ssh_host_key_dsa_public|default("N/A") }}''
* RSA: ''{{ ansible_ssh_host_key_rsa_public|default("N/A") }}''
* ECDSA: ''{{ ansible_ssh_host_key_ecdsa_public|default("N/A") }}''
* Ed25519: ''{{ ansible_ssh_host_key_ed25519_public|default("N/A") }}''
----
//{{ ansible_managed }}//

@ -1,4 +0,0 @@
{% for h in hostvars|sort %}
* [[ {{ h }} ]]
{% endfor %}

@ -1,27 +0,0 @@
---
- name: Detect domain name
set_fact:
domainname: "{{ ansible_dns.domain|default(False) or ansible_dns.search.0|default(False) or ansible_domain|default(False) or 'invalid'}}"
- name: Add name/IP to hosts file
lineinfile:
dest: /etc/hosts
regexp: '^{{ ansible_default_ipv4.address }}'
line: '{{ ansible_default_ipv4.address }} {{ ansible_hostname }}.{{ domainname }} {{ ansible_hostname }}'
backup: yes
- name: Clean/remove 127.0.1.1
lineinfile:
dest: /etc/hosts
regexp: '^127.0.1.1'
state: absent
backup: yes
- name: Ensure 127.0.0.1 localhost
lineinfile:
dest: /etc/hosts
regexp: '127.0.0.1'
line: '127.0.0.1 localhost localhost.localdomain'
insertbefore: BOF
backup: yes

@ -1,4 +0,0 @@
ntp_servers:
- 0.debian.pool.ntp.org
- 1.debian.pool.ntp.org
- 2.debian.pool.ntp.org

@ -1,25 +0,0 @@
---
- name: Install NTP
package:
name: "{{ ntp_package_name }}"
state: latest
- name: Template Config
template:
src: "etc/{{ ntp_package_name }}.conf.j2"
dest: "/etc/{{ ntp_package_name }}.conf"
mode: 0644
owner: root
group: root
backup: yes
- name: Restart Service
service:
name: "{{ ntp_service_name }}"
state: restarted
- name: Ensure Running
service:
name: "{{ ntp_service_name }}"
state: started
enabled: yes

@ -1,2 +0,0 @@
---
ssh_service_name: sshd

@ -1,18 +0,0 @@
---
- name: "Set «PermitRootLogin» to «without-password»"
lineinfile:
dest: /etc/ssh/sshd_config
regexp: '^#? *PermitRootLogin'
line: "PermitRootLogin without-password"
backup: yes
register: sshconfigchanged
- name: Restart sshd
service:
name: "{{ ssh_service_name }}"
state: restarted
sleep: 5
when: sshconfigchanged is changed
Loading…
Cancel
Save