ansible-base/roles/system_basics/tasks/main.json

50 lines
938 B
JSON

[
{
"name": "Set timezone to Berlin",
"become": true,
"community.general.timezone": {
"name": "Europe/Berlin"
}
},
{
"name": "Limit syslogs",
"become": true,
"ansible.builtin.lineinfile": {
"dest": "/etc/systemd/journald.conf",
"regexp": "^#?\\s*SystemMaxFileSize",
"line": "SystemMaxFileSize=2G"
},
"notify": "restart journal"
},
{
"name": "install packages",
"become": true,
"ansible.builtin.apt": {
"pkg": [
"acl",
"vim",
"htop",
"tmux",
"rsync"
]
}
},
{
"name": "Set vim as default editor",
"become": true,
"community.general.alternatives": {
"name": "editor",
"path": "/usr/bin/vim.basic"
}
},
{
"name": "Disable root login without key",
"become": true,
"ansible.builtin.lineinfile": {
"dest": "/etc/ssh/sshd_config",
"regexp": "^#?PermitRootLogin ",
"line": "PermitRootLogin without-password"
},
"notify": "restart sshd"
}
]