Find a file
2024-11-17 12:22:10 +01:00
defaults logcompress: configurable compression tool, default zstd 2024-09-19 23:35:42 +02:00
files ubuntu has an own crap-package-list (landscape, ubuntu-*), while any other only vim-tiny and snapd 2024-11-17 09:31:37 +01:00
handlers init 2021-04-10 22:11:19 +02:00
meta whitespaces fixed 2021-04-10 22:21:21 +02:00
tasks ciphers, macs, kexs fix up and sorted list 2024-11-17 12:21:51 +01:00
templates logcompress: ansible does not finde j2-file, so give path explicit 2024-09-20 00:42:52 +02:00
tests init 2021-04-10 22:11:19 +02:00
vars logcompress_algo: lz -> lzip 2024-11-17 12:22:10 +01:00
.gitignore init 2021-04-10 22:11:19 +02:00
README.adoc whitespaces fixed 2021-04-10 22:21:21 +02:00

System-template
===============

Configures the base for all servers for real administrators.
Any needed tools (vim, network-tools, progress, zsh, etc-keeper, ...).
Removes pains (vim-tiny, snap, ubuntu-adverts, ...).
Defines a standard for syslog (everything to `/var/log/%Y-%m-%d`).

Requirements
------------

Debian-/Fedora-based distribution and a network-connection.
It needs the devices.facts, which cannot be installed by a role, so use the example below.

Role Variables
--------------

TODO

Example Playbook
----------------

----
---
# vim: set expandtab tabstop=2 shiftwidth=2:

- name: ansible facts
  hosts: all
  remote_user: root
  gather_facts: no 
  become: no
  tasks:
  - name: ansible-facts directory
    file:
      path: /etc/ansible/facts.d
      state: directory
  - name: devices.facts
    copy:
      content: |
        #!/usr/bin/env sh

        check() {
          v="$1"
          shift
          if "$@" >/dev/null
          then
            echo -n "\"$v\": true, "
          else
            echo -n "\"$v\": false, "
          fi
        }

        echo -n '{'
        check random  dd count=1 of=/dev/null status=none if=/dev/random
        check urandom dd count=1 of=/dev/null status=none if=/dev/urandom
        check hwrng   dd count=1 of=/dev/null status=none if=/dev/hwrng
        check hwclock hwclock --test 2>/dev/null
        echo '"checked": true}'
      dest: /etc/ansible/facts.d/devices.fact
      mode: 0755
      owner: root
      group: root

- hosts: all
  remote_user: root
  become: false

  tasks:
  - import_role:
      name: denkn.system
----

License
-------

AGPLv3

Author Information
------------------

Denis Knauf - https://git.denkn.at/deac/ansible-role-system