Good ol' organization. Tasks folder started getting too busy, and still kind of is.
This commit is contained in:
10
tasks/general/cron.yml
Normal file
10
tasks/general/cron.yml
Normal file
@ -0,0 +1,10 @@
|
||||
---
|
||||
|
||||
- name: install cron job (ansible-pull)
|
||||
cron:
|
||||
user: ansible
|
||||
name: "Ansible Sync"
|
||||
minute: "*/15"
|
||||
job: "{{ ansible_pull_exec }} -o -U https://github.com/Hyperling/ansible.git"
|
||||
state: present
|
||||
disabled: no
|
6
tasks/general/groups.yml
Normal file
6
tasks/general/groups.yml
Normal file
@ -0,0 +1,6 @@
|
||||
---
|
||||
# Groups that do not come to all distros by default.
|
||||
|
||||
- name: Ensure sudo group exists (Looking at you BSD!)
|
||||
group:
|
||||
name: sudo
|
15
tasks/general/harden.yml
Normal file
15
tasks/general/harden.yml
Normal file
@ -0,0 +1,15 @@
|
||||
---
|
||||
|
||||
- name: Remove CUPS Daemon
|
||||
service:
|
||||
name: "{{ cups }}"
|
||||
pattern: "{{ cups_pattern }}"
|
||||
state: stopped
|
||||
enabled: no
|
||||
|
||||
- name: Remove CUPS-Browse Daemon
|
||||
service:
|
||||
name: "{{ cups_browse }}"
|
||||
pattern: "{{ cups_browse_pattern }}"
|
||||
state: stopped
|
||||
enabled: no
|
16
tasks/general/hardness_check_lynis.yml
Normal file
16
tasks/general/hardness_check_lynis.yml
Normal file
@ -0,0 +1,16 @@
|
||||
---
|
||||
|
||||
- name: Install Lynis
|
||||
git:
|
||||
repo: https://github.com/CISOfy/lynis
|
||||
dest: "{{ lynis_install_dir }}"
|
||||
clone: yes
|
||||
force: yes
|
||||
|
||||
- name: Run Lynis Audit System
|
||||
shell: "{{ lynis_install_dir }}/lynis --no-colors audit system > {{ lynis_report }} 2>&1"
|
||||
|
||||
- name: Make Lynis Report Readable
|
||||
file:
|
||||
path: "{{ lynis_report }}"
|
||||
mode: '0444'
|
17
tasks/general/packages.yml
Normal file
17
tasks/general/packages.yml
Normal file
@ -0,0 +1,17 @@
|
||||
---
|
||||
|
||||
- name: Install Repo Software
|
||||
package:
|
||||
name:
|
||||
- sudo
|
||||
- htop
|
||||
- neofetch
|
||||
- "{{ sshfs }}"
|
||||
- locate
|
||||
state: present
|
||||
|
||||
- name: Remove Repo Software
|
||||
package:
|
||||
name:
|
||||
- cowsay # Sorry ;)
|
||||
state: present
|
18
tasks/general/sudo.yml
Normal file
18
tasks/general/sudo.yml
Normal file
@ -0,0 +1,18 @@
|
||||
---
|
||||
# Ensure the proper users have sudo access.
|
||||
|
||||
- name: Add Ansible Sudoers File
|
||||
copy:
|
||||
src: sudoers_ansible
|
||||
dest: "{{ sudoers_install_dir }}"
|
||||
owner: root
|
||||
group: "{{ root_group }}"
|
||||
mode: 0440
|
||||
|
||||
- name: Add Sudo Group Sudoers File
|
||||
copy:
|
||||
src: sudoers_sudo
|
||||
dest: "{{ sudoers_install_dir }}"
|
||||
owner: root
|
||||
group: "{{ root_group }}"
|
||||
mode: 0440
|
22
tasks/general/users.yml
Normal file
22
tasks/general/users.yml
Normal file
@ -0,0 +1,22 @@
|
||||
---
|
||||
# Create users for both desktop and server machines.
|
||||
|
||||
# Scheduler
|
||||
- name: Create User Ansible
|
||||
user:
|
||||
name: ansible
|
||||
comment: Ansible
|
||||
system: yes
|
||||
|
||||
|
||||
# Superuser
|
||||
- name: Create User Hyperling
|
||||
user:
|
||||
name: ling
|
||||
comment: Hyperling
|
||||
groups:
|
||||
- sudo
|
||||
append: yes
|
||||
shell: /bin/bash
|
||||
create_home: yes
|
||||
generate_ssh_key: yes
|
Reference in New Issue
Block a user