diff --git a/host_vars/debian-test.universe.local.yml b/host_vars/debian-test.universe.local.yml index 5d29e2b..cbc486c 100644 --- a/host_vars/debian-test.universe.local.yml +++ b/host_vars/debian-test.universe.local.yml @@ -1,2 +1,3 @@ --- netdata: true +set_hosts: true diff --git a/host_vars/mewimeet.de.yml b/host_vars/mewimeet.de.yml index 2d256f7..8ee79ea 100644 --- a/host_vars/mewimeet.de.yml +++ b/host_vars/mewimeet.de.yml @@ -11,8 +11,10 @@ microcode_amd_install: false microcode_intel_install: false proxmox_instance: false raspberry_pi: false +preinstalled: true # server +set_hosts: false unattended_upgrades: true web_server: true netdata: true diff --git a/host_vars/ubuntu-test.universe.local.yml b/host_vars/ubuntu-test.universe.local.yml index f267560..fd66c59 100644 --- a/host_vars/ubuntu-test.universe.local.yml +++ b/host_vars/ubuntu-test.universe.local.yml @@ -2,4 +2,5 @@ copy_ssh_priv_keys: true netdata: true webserver: true -nginx: true \ No newline at end of file +nginx: true +set_hosts: true \ No newline at end of file diff --git a/hosts b/hosts index f210fb7..f31ec70 100644 --- a/hosts +++ b/hosts @@ -27,8 +27,6 @@ coruscant.universe.local [jitsimeet] #ubuntu-test jitsi_fqdn=mewimeet.de mewimeet.de jitsi_fqdn=mewimeet.de -jitsi-meet-eu jitsi_fqdn=mewimeet.de - [mailserver] coruscant.universe.local diff --git a/roles/base/files/system_setup/sshd_custom.conf b/roles/base/files/system_setup/sshd_custom.conf index 3915ee6..7872136 100644 --- a/roles/base/files/system_setup/sshd_custom.conf +++ b/roles/base/files/system_setup/sshd_custom.conf @@ -15,7 +15,7 @@ PrintLastLog no AllowUsers rene Match Address 192.168.1.240 - AllowUsers root,rene + AllowUsers root rene Match User root PasswordAuthentication no diff --git a/roles/base/tasks/system_setup/hosts.yml b/roles/base/tasks/system_setup/hosts.yml index b24b0d3..b1ae9e3 100644 --- a/roles/base/tasks/system_setup/hosts.yml +++ b/roles/base/tasks/system_setup/hosts.yml @@ -6,4 +6,7 @@ owner: 'root' group: 'root' loop: - - { ip: '192.168.1.240', fqdn: 'gitlab.social.my-wan.de'} \ No newline at end of file + - { ip: '192.168.1.240', fqdn: 'gitlab.social.my-wan.de'} + when: + - set_hosts is defined + - set_hosts == true \ No newline at end of file diff --git a/roles/base/tasks/system_setup/openssh.yml b/roles/base/tasks/system_setup/openssh.yml index de394e4..5241d8a 100644 --- a/roles/base/tasks/system_setup/openssh.yml +++ b/roles/base/tasks/system_setup/openssh.yml @@ -12,7 +12,7 @@ enabled: yes state: started -- name: system setup | openssh | generate sshd_config file from template +- name: system setup | openssh | copy sshd custom config tags: openssh,ssh,system,settings copy: src: system_setup/sshd_custom.conf diff --git a/roles/base/tasks/users/rene.yml b/roles/base/tasks/users/rene.yml index 1bfb307..2a5bab9 100644 --- a/roles/base/tasks/users/rene.yml +++ b/roles/base/tasks/users/rene.yml @@ -2,6 +2,8 @@ user: name: rene shell: "/usr/bin/zsh" + groups: "sudo" + append: True # - name: users | rene | install public ssh keys # authorized_key: diff --git a/roles/base/tasks/users/root.yml b/roles/base/tasks/users/root.yml index 64f4862..afa0938 100644 --- a/roles/base/tasks/users/root.yml +++ b/roles/base/tasks/users/root.yml @@ -1,7 +1,7 @@ -- name: users | root | ensure account is locked - user: - name: root - password_lock: yes +# - name: users | root | ensure account is locked +# user: +# name: root +# password_lock: yes # - name: users | root | install public ssh keys # authorized_key: diff --git a/roles/jitsimeet/tasks/install_jitsimeet.yml b/roles/jitsimeet/tasks/install_jitsimeet.yml index bdca4bb..6fe1d7e 100644 --- a/roles/jitsimeet/tasks/install_jitsimeet.yml +++ b/roles/jitsimeet/tasks/install_jitsimeet.yml @@ -16,20 +16,21 @@ # - jitsi-meet-web-config # - jitsi-videobridge2 -- name: jitsimeet | set debconf vars - shell: - cmd: "{{ playbook_dir }}/roles/jitsimeet/files/set_debconf.sh {{ jitsi_fqdn }}" - -- name: jitsimeet | install packages - package: - name: - - prosody - - jicofo - - jitsi-meet-web - - jitsi-meet-prosody - - jitsi-meet-web-config - - jitsi-videobridge2 - notify: restart_nginx +- block: + - name: jitsimeet | set debconf vars + shell: + cmd: "{{ playbook_dir }}/roles/jitsimeet/files/set_debconf.sh {{ jitsi_fqdn }}" + - name: jitsimeet | install packages + package: + name: + - prosody + - jicofo + - jitsi-meet-web + - jitsi-meet-prosody + - jitsi-meet-web-config + - jitsi-videobridge2 + notify: restart_nginx + when: preinstalled == false or preinstalled is not defined - name: jitsimeet | copy custom settings copy: diff --git a/roles/jitsimeet/tasks/prepare_system.yml b/roles/jitsimeet/tasks/prepare_system.yml index 53036b8..0b96251 100644 --- a/roles/jitsimeet/tasks/prepare_system.yml +++ b/roles/jitsimeet/tasks/prepare_system.yml @@ -6,27 +6,29 @@ DefaultLimitNPROC=65000 DefaultTasksMax=65000 -- name: jitsimeet | reload systemd - systemd: - daemon_reload: true +- block: + - name: jitsimeet | reload systemd + systemd: + daemon_reload: true -- name: jitsimeet | import GPG key - apt_key: - url: "https://download.jitsi.org/jitsi-key.gpg.key" - state: present # not required. choices: absent;present. Ensures that the key is present (added) or absent (revoked). + - name: jitsimeet | import GPG key + apt_key: + url: "https://download.jitsi.org/jitsi-key.gpg.key" + state: present # not required. choices: absent;present. Ensures that the key is present (added) or absent (revoked). -- name: jitsimeet | add repository - lineinfile: - path: "/etc/apt/sources.list.d/jitsi-stable.list" - line: "deb https://download.jitsi.org stable/" - create: True - backup: True - notify: apt_update + - name: jitsimeet | add repository + lineinfile: + path: "/etc/apt/sources.list.d/jitsi-stable.list" + line: "deb https://download.jitsi.org stable/" + create: True + backup: True + notify: apt_update -- name: jitsimeet | flush handlers - meta: flush_handlers + - name: jitsimeet | flush handlers + meta: flush_handlers -- name: jitsimeet | add debconf-utils package - package: - name: debconf-utils - state: latest \ No newline at end of file + - name: jitsimeet | add debconf-utils package + package: + name: debconf-utils + state: latest + when: preinstalled == false or preinstalled is not defined \ No newline at end of file