2024-08-02 04:27:30 +00:00
|
|
|
# vi: ft=yaml.ansible
|
|
|
|
|
- name: update repos
|
|
|
|
|
become: true
|
|
|
|
|
apt:
|
|
|
|
|
upgrade: yes
|
|
|
|
|
update_cache: yes
|
|
|
|
|
cache_valid_time: 12800
|
|
|
|
|
- pam_limits:
|
|
|
|
|
domain: '*'
|
|
|
|
|
limit_type: soft
|
|
|
|
|
limit_item: nofile
|
|
|
|
|
value: 1280000
|
2024-08-03 19:05:31 +00:00
|
|
|
- name: populate /etc/environment
|
|
|
|
|
lineinfile:
|
|
|
|
|
path: "/etc/environment"
|
|
|
|
|
state: present
|
|
|
|
|
regexp: "^{{ item.key }}="
|
|
|
|
|
line: "{{ item.key }}={{ item.value}}"
|
|
|
|
|
with_items:
|
|
|
|
|
- key: EDITOR
|
|
|
|
|
value: vim
|
|
|
|
|
become: yes
|
2024-08-02 04:27:30 +00:00
|
|
|
- name: install ntp
|
|
|
|
|
apt: pkg=ntp state=present
|
|
|
|
|
- name: install vim
|
|
|
|
|
apt: pkg=vim state=present
|
|
|
|
|
- name: install python3
|
|
|
|
|
apt: pkg=python3 state=present
|
|
|
|
|
- name: install build-essential
|
|
|
|
|
apt: pkg=build-essential state=present
|
|
|
|
|
- name: ensure ntp is running
|
|
|
|
|
service: name=ntp state=started enabled=yes
|
|
|
|
|
- name: Disallow SSH password authentication
|
|
|
|
|
lineinfile:
|
|
|
|
|
dest: /etc/ssh/sshd_config
|
|
|
|
|
regexp: "^PasswordAuthentication"
|
|
|
|
|
line: "PasswordAuthentication no"
|
|
|
|
|
state: present
|
|
|
|
|
validate: sshd -t -f %s
|
|
|
|
|
notify:
|
|
|
|
|
- restart sshd
|
