aboutsummaryrefslogtreecommitdiffstats
path: root/playbooks/init_adze.yml
blob: 9df9fcd57ed65b296f9e29491ace2848042427ed (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
---
- name: Initializing adze.robocracy.org
  hosts: adze.robocracy.org
  remote_user: root
  gather_facts: True
  vars_files:
    - vars/vault.yml
    - vars/robocracy.yml

  vars:
    - admin_email: "root@robocracy.org"
    - main_user_name: bnewbold
    - hostname_fqdn: adze.robocracy.org
    - cgit_hostname: git.bnewbold.net
    - gitolite_hostname: git.bnewbold.net

  roles:
    - debian_bullseye
    - hostname
    - common
    - nginx
    - git
    - znc
    - mailserver

  tasks:
    - name: Create main user account
      user: name={{main_user_name}} state=present groups=sudo append=yes shell=/bin/bash
    - name: Give main user account sudo power
      template: src=roles/common/templates/sudoers.j2 dest=/etc/sudoers.d/sudoers owner=root group=root mode=0440 validate='visudo -cf %s'
    - name: Install main user authorized SSH keys
      authorized_key: user="{{ main_user_name}}" key="{{ item }}"
      with_file:
        - pubkeys/bnewbold.pub
    - name: Install root user authorized SSH keys
      authorized_key: user=root key="{{ item }}"
      with_file:
        - pubkeys/bnewbold.pub
    - name: Extra packages for this host
      apt:
        state: present
        name:
          - socat
          - rsyslog

  post_tasks:
    - name: Sanity check that we have IPv4 connectivity
      command: /bin/ping -c 2 mit.edu
    - name: Sanity check that we have IPv6 connectivity
      command: /bin/ping6 -c 2 mit.edu
    - name: Done
      shell: echo 'Done!'