ansible-role-system/tasks/os-redhat.yml

---
# vim: set expandtab tabstop=2 shiftwidth=2:

# installation packages:

- name: need epel-release
  yum:
    lock_timeout: 30
    name: [epel-release]

- name: install packages
  yum:
    lock_timeout: 30
    name: '{{lookup("flattened", items)}}'
  vars:
    items:
    - '{{ []  if is_virt_guest else  ["chrony", "smartmontools"] }}'
    #- yum-cron
    - glibc-langpack-de
    - glibc-langpack-en
    - curl
    - file
    - etckeeper
    - git 
    - '{{ []  if is_container else  ["haveged", "lvm2"] }}'
    - htop
    #- inetutils-ping
    - iproute
    #- knot-dnsutils
    #- ldap-utils
    - lsof
    - man
    - man-pages
    - man-db
    - gnupg2
    - net-tools     
    #- '{{ ["nullmailer"]  if has_nullmailer else  [] }}'
    #- progress
    - python3
    - pv 
    - '{{ ["rng-tools"]  if has_hwrng else  [] }}'
    - rsync
    - socat
    - sudo
    - rsyslog
    - systemd 
    - tmux
    - tzdata
    - vim
    - '{{ []  if is_container else  ["xfsdump", "xfsprogs"] }}'
    - zsh

- include_tasks: sshd_config.yml
- include_tasks: systemd.yml
- include_tasks: ohmyzsh.yml
- include_tasks: users.yml

- name: setup mailname
  copy:
    dest: /etc/mailname
    content: |
      {{sys_mailname | default(ansible_fqdn) | mandatory}}
    owner: root
    group: root
    mode: 0644

- name: enable ssh
  systemd: 
    name: sshd
    enabled: yes
    state: started