1 files changed, 90 insertions, 0 deletions
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
new file mode 100644
index 0000000..d4c2347
--- /dev/null
+++ b/roles/common/tasks/main.yml
@@ -0,0 +1,90 @@
+---
+
+- name: Update apt cache
+  apt: update_cache=yes cache_valid_time=3600
+  tags:
+    - dependencies
+
+- name: Upgrade all safe packages
+  apt: upgrade=safe
+  tags:
+    - dependencies
+
+- name: Install necessities and nice-to-haves
+  apt: pkg={{ item }} state=installed
+  with_items:
+    - apt-transport-https
+    - apticron
+    - aptitude
+    - bzip2
+    - ca-certificates
+    - curl
+    - debian-goodies
+    - dialog
+    - dnsutils
+    - etckeeper
+    # fail2ban in security
+    - file
+    - git
+    - htop
+    - iftop
+    - ifupdown
+    - iotop
+    - iproute
+    - iputils-ping
+    - isc-dhcp-client
+    - less
+    - libui-dialog-perl
+    - locales
+    - locales-all
+    - lsof
+    - lvm2
+    - man-db
+    - manpages-dev
+    - molly-guard
+    - mosh
+    - mtr-tiny
+    - netbase
+    - netcat
+    - net-tools
+    - ngrep
+    - openssh-server
+    - openssl
+    - pv
+    - python
+    - python-software-properties
+    # rkhunter in security
+    - screen
+    - sudo
+    - tcpdump
+    - unzip
+    - unattended-upgrades
+    - vim-nox
+    - wget
+  tags:
+    - dependencies
+
+- name: timezone - configure /etc/timezone
+  copy:
+    content: "{{ common_timezone | regex_replace('$', '\n') }}"
+    dest: /etc/timezone
+    owner: root
+    group: root
+    mode: 0644
+  register: common_timezone_config
+
+- name: timezone - Set localtime to UTC
+  file: src=/usr/share/zoneinfo/Etc/UTC dest=/etc/localtime
+  when: common_timezone_config.changed
+
+- name: timezone - reconfigure tzdata
+  command: dpkg-reconfigure --frontend noninteractive tzdata
+  when: common_timezone_config.changed
+
+- name: Apticron email configuration
+  template: src=apticron.conf.j2 dest=/etc/apticron/apticron.conf
+
+#- include: users.yml tags=users
+- include: security.yml tags=security
+- include: ntp.yml tags=ntp
+- include: extras.yml tags=extras