Better names. :)
This commit is contained in:
		| @@ -1,6 +1,6 @@ | ||||
| --- | ||||
| # Facts that must be gathered by tasks. | ||||
| # Facts that must be gathered after running tasks. | ||||
|  | ||||
| - name: Gather | Locate BASH | ||||
| - name: Facts | General | Gather | Locate BASH | ||||
|   shell: which bash | ||||
|   register: bash_exec | ||||
| @@ -2,21 +2,21 @@ | ||||
| # Define program names per OS for package builtin. | ||||
| # This file is for ALL systems and should not include UI components. | ||||
|  | ||||
| - name: Set Pop OS Package Names | ||||
| - name: Facts | Workstation | Package | Pop OS | ||||
|   set_fact: | ||||
|     sshfs: sshfs | ||||
|     locate: locate | ||||
|   when: ansible_distribution == "Pop!_OS" | ||||
|  | ||||
|  | ||||
| - name: Set Debian and Ubuntu Package Names | ||||
| - name: Facts | Workstation | Package | Debian and Ubuntu | ||||
|   set_fact: | ||||
|     sshfs: sshfs | ||||
|     locate: locate | ||||
|   when: ansible_distribution in ("Debian","Ubuntu") | ||||
|  | ||||
|  | ||||
| - name: Set FreeBSD Package Names | ||||
| - name: Facts | Workstation | Package | FreeBSD | ||||
|   set_fact: | ||||
|     sshfs: fusefs-sshfs | ||||
|     locate: htop # This is just a placeholder to prevent errors | ||||
|   | ||||
| @@ -1,7 +1,7 @@ | ||||
| --- | ||||
| # Define program names per OS for service builtin. | ||||
|  | ||||
| - name: Set Pop OS Service Names | ||||
| - name: Facts | Workstation | Service | Pop OS | ||||
|   set_fact: | ||||
|     cups: cups | ||||
|     cups_pattern: cupsd | ||||
| @@ -10,7 +10,7 @@ | ||||
|   when: ansible_distribution == "Pop!_OS" | ||||
|  | ||||
|  | ||||
| - name: Set Debian and Ubuntu Service Names | ||||
| - name: Facts | Workstation | Service | Debian and Ubuntu | ||||
|   set_fact: | ||||
|     cups: cups | ||||
|     cups_pattern: cupsd | ||||
| @@ -19,7 +19,7 @@ | ||||
|   when: ansible_distribution in ("Debian","Ubuntu") | ||||
|  | ||||
|  | ||||
| - name: Set FreeBSD Service Names | ||||
| - name: Facts | Workstation | Service | FreeBSD | ||||
|   set_fact: | ||||
|     cups: cups | ||||
|     cups_pattern: cupsd | ||||
|   | ||||
| @@ -1,7 +1,7 @@ | ||||
| --- | ||||
| # Define file, folder, and other facts per OS. | ||||
|  | ||||
| - name: Set Pop OS Facts | ||||
| - name: Facts | Workstation | System | Pop OS | ||||
|   set_fact: | ||||
|     lynis_install_dir: /usr/local/lynis | ||||
|     lynis_report: /home/ling/lynis.log | ||||
| @@ -10,7 +10,7 @@ | ||||
|   when: ansible_distribution == "Pop!_OS" | ||||
|  | ||||
|  | ||||
| - name: Set Debian and Ubuntu Facts | ||||
| - name: Facts | Workstation | System | Debian and Ubuntu | ||||
|   set_fact: | ||||
|     lynis_install_dir: /usr/local/lynis | ||||
|     lynis_report: /root/lynis.log | ||||
| @@ -19,7 +19,7 @@ | ||||
|   when: ansible_distribution in ("Debian","Ubuntu") | ||||
|  | ||||
|  | ||||
| - name: Set FreeBSD Facts | ||||
| - name: Facts | Workstation | System | FreeBSD | ||||
|   set_fact: | ||||
|     lynis_install_dir: /usr/local/lynis | ||||
|     lynis_report: /root/lynis.log | ||||
|   | ||||
| @@ -1,13 +1,13 @@ | ||||
| --- | ||||
| # Define users and groups per OS type. | ||||
|  | ||||
| - name: Set Linux User Variables | ||||
| - name: Facts | Workstation | User | Linux | ||||
|   set_fact: | ||||
|     root_group: root | ||||
|   when: ansible_system == "Linux" | ||||
|  | ||||
|  | ||||
| - name: Set FreeBSD User Variables | ||||
| - name: Facts | Workstation | User | FreeBSD | ||||
|   set_fact: | ||||
|     root_group: wheel | ||||
|   when: ansible_system == "FreeBSD" | ||||
| @@ -2,7 +2,7 @@ | ||||
| # Define program names per OS for package builtin. | ||||
| # This is only for Workstation devices with UIs. | ||||
|  | ||||
| - name: Set Pop OS Package Names | ||||
| - name: Facts | Workstation | Package | Pop OS | ||||
|   set_fact: | ||||
|     firefox: firefox | ||||
|     firefox-esr: firefox-esr | ||||
| @@ -11,7 +11,7 @@ | ||||
|   when: ansible_distribution == "Pop!_OS" | ||||
|  | ||||
|  | ||||
| - name: Set Debian and Ubuntu Package Names | ||||
| - name: Facts | Workstation | Package | Debian and Ubuntu | ||||
|   set_fact: | ||||
|     firefox: firefox | ||||
|     firefox-esr: firefox-esr | ||||
| @@ -20,7 +20,7 @@ | ||||
|   when: ansible_distribution in ("Debian","Ubuntu") | ||||
|  | ||||
|  | ||||
| - name: Set FreeBSD Package Names | ||||
| - name: Facts | Workstation | Package | FreeBSD | ||||
|   set_fact: | ||||
|     firefox: firefox | ||||
|     firefox-esr: firefox-esr | ||||
|   | ||||
| @@ -1,19 +1,19 @@ | ||||
| --- | ||||
| # Define file, folder, and other facts per OS. | ||||
|  | ||||
| - name: Set Pop OS Facts | ||||
| - name: Facts | Workstation | System | Pop OS | ||||
|   set_fact: | ||||
|     flatpak_distro: true | ||||
|   when: ansible_distribution == "Pop!_OS" | ||||
|  | ||||
|  | ||||
| - name: Set Debian and Ubuntu Facts | ||||
| - name: Facts | Workstation | System | Debian and Ubuntu | ||||
|   set_fact: | ||||
|     flatpak_distro: true | ||||
|   when: ansible_distribution in ("Debian","Ubuntu") | ||||
|  | ||||
|  | ||||
| - name: Set FreeBSD Facts | ||||
| - name: Facts | Workstation | System | FreeBSD | ||||
|   set_fact: | ||||
|     flatpak_distro: false | ||||
|   when: ansible_system == "FreeBSD" | ||||
| @@ -1,7 +1,7 @@ | ||||
| --- | ||||
| # Provide FreeBSD with a DE. | ||||
|  | ||||
| - name: FreeBSD | Software | Install UI Components | ||||
| - name: Workstation | FreeBSD | GUI | Install UI Components | ||||
|   package:  | ||||
|     name: | ||||
|     - xorg | ||||
| @@ -10,14 +10,14 @@ | ||||
|     - "{{ thunderbird }}" | ||||
|     state: present | ||||
|  | ||||
| - name: FreeBSD | Software | Uninstall Bloat | ||||
| - name: Workstation | FreeBSD | GUI | Uninstall Bloat | ||||
|   package:  | ||||
|     name: | ||||
|     - "{{ firefox }}" | ||||
|     - "{{ evolution }}" | ||||
|     state: absent | ||||
|  | ||||
| - name: FreeBSD | Software | Create rc.conf Entries | ||||
| - name: Workstation | FreeBSD | GUI | Create rc.conf Entries | ||||
|   blockinfile: | ||||
|     path: /etc/rc.conf | ||||
|     block: | | ||||
| @@ -29,7 +29,7 @@ | ||||
|       fusefs_enable="YES" | ||||
|     backup: yes | ||||
|  | ||||
| - name: FreeBSD | Software | Create fstab Entries | ||||
| - name: Workstation | FreeBSD | GUI | Create fstab Entries | ||||
|   blockinfile: | ||||
|     path: /etc/fstab | ||||
|     block: | | ||||
|   | ||||
| @@ -1,6 +1,6 @@ | ||||
| --- | ||||
| # Groups that do not come to all distros by default. | ||||
|  | ||||
| - name: Ensure sudo group exists (Looking at you BSD!) | ||||
| - name: General | Account Management | Groups | Sudo (Looking at you BSD!) | ||||
|   group: | ||||
|     name: sudo | ||||
|   | ||||
| @@ -6,11 +6,11 @@ | ||||
| #  openssh_keypair: | ||||
| #    path: /root/.ssh/id_rsa | ||||
|  | ||||
| - name: SSH Key | Root | Create | ||||
| - name: General | Account Management | SSH Key | Root | Create | ||||
|   shell: ssh-keygen -t rsa -N '' -f ~/.ssh/id_rsa <<< n | ||||
|   args: | ||||
|     executable: "{{ bash_exec.stdout }}" | ||||
|   ignore_errors: yes | ||||
|  | ||||
| - name: SSH Key | Root | Copy to 1337 | ||||
| - name: General | Account Management | SSH Key | Root | Copy to 1337 | ||||
|   shell: ssh-copy-id -i /root/.ssh/id_rsa ling@leet | ||||
| @@ -1,20 +1,20 @@ | ||||
| --- | ||||
| # Mount shares that all systems should have. | ||||
|  | ||||
| - name: Mounts | Create 1337 Folder | ||||
| - name: General | Account Management | Mounts | Create 1337 Folder | ||||
|   file:  | ||||
|     path: /mnt/leet | ||||
|     state: directory | ||||
|     mode: '0755' | ||||
|  | ||||
| - name: Mounts | Create fstab Entries | ||||
| - name: General | Account Management | Mounts | Create fstab Entries | ||||
|   blockinfile: | ||||
|     path: /etc/fstab | ||||
|     block: | | ||||
|       ling@leet: /mnt/leet fuse.sshfs defaults,_netdev,allow_other,delay_connect 0 0 | ||||
|     backup: yes | ||||
|  | ||||
| - name: Mounts | Mount All | ||||
| - name: General | Account Management | Mounts | Mount All | ||||
|   shell: mount -a | ||||
|   args: | ||||
|     warn: false | ||||
|   | ||||
| @@ -1,7 +1,7 @@ | ||||
| --- | ||||
| # Ensure the proper users have sudo access. | ||||
|  | ||||
| - name: Add Ansible Sudoers File | ||||
| - name: General | Account Management | Sudo | Copy Ansible | ||||
|   copy: | ||||
|     src: sudoers_ansible | ||||
|     dest: "{{ sudoers_install_dir }}" | ||||
| @@ -9,7 +9,7 @@ | ||||
|     group: "{{ root_group }}" | ||||
|     mode: 0440 | ||||
|  | ||||
| - name: Add Sudo Group Sudoers File | ||||
| - name: General | Account Management | Sudo | Copy Sudo Group | ||||
|   copy: | ||||
|     src: sudoers_sudo | ||||
|     dest: "{{ sudoers_install_dir }}" | ||||
|   | ||||
| @@ -2,7 +2,7 @@ | ||||
| # Create users for both desktop and server machines. | ||||
|  | ||||
| # Scheduler | ||||
| - name: Create User Ansible | ||||
| - name: General | Account Management | User | Ansible | ||||
|   user: | ||||
|     name: ansible | ||||
|     comment: Ansible | ||||
| @@ -10,7 +10,7 @@ | ||||
|  | ||||
|  | ||||
| # Superuser | ||||
| - name: Create User Hyperling | ||||
| - name: General | Account Management | User | Hyperling | ||||
|   user: | ||||
|     name: ling | ||||
|     comment: Hyperling | ||||
|   | ||||
| @@ -1,6 +1,6 @@ | ||||
| --- | ||||
|  | ||||
| - name: install cron job (ansible-pull) | ||||
| - name: General | Cron | Ansible | Create Main Job | ||||
|   cron: | ||||
|     user: ansible | ||||
|     name: "Ansible Sync" | ||||
|   | ||||
| @@ -1,13 +1,13 @@ | ||||
| --- | ||||
|  | ||||
| - name: Remove CUPS Daemon | ||||
| - name: General | Software | Harden | Remove CUPS Daemon | ||||
|   service: | ||||
|     name: "{{ cups }}" | ||||
|     pattern: "{{ cups_pattern }}" | ||||
|     state: stopped | ||||
|     enabled: no | ||||
|  | ||||
| - name: Remove CUPS-Browse Daemon | ||||
| - name: General | Software | Harden | Remove CUPS-Browse Daemon | ||||
|   service: | ||||
|     name: "{{ cups_browse }}" | ||||
|     pattern: "{{ cups_browse_pattern }}" | ||||
|   | ||||
| @@ -1,16 +1,16 @@ | ||||
| --- | ||||
| # Cross-platform package management. | ||||
|  | ||||
| - name: Repo Cache Refresh (Apt and Pacman) | ||||
| - name: General | Software | Packages | Cache Refresh (Apt and Pacman) | ||||
|   package: | ||||
|     update_cache: yes | ||||
|   when: ansible_pkg_mgr in ["apt", "pacman"] | ||||
|  | ||||
| - name: Repo Cache Refresh (FreeBSD) | ||||
| - name: General | Software | Packages | Cache Refresh (FreeBSD) | ||||
|   shell: pkg update | ||||
|   when: ansible_system == "FreeBSD" | ||||
|  | ||||
| - name: Repo Install Software | ||||
| - name: General | Software | Packages | Install Software | ||||
|   package:  | ||||
|     name: | ||||
|     - bash | ||||
| @@ -20,7 +20,7 @@ | ||||
|     - "{{ locate }}" | ||||
|     state: present | ||||
|  | ||||
| - name: Repo Update Software (Disabled) | ||||
| - name: General | Software | Packages | Update Software (Disabled) | ||||
|   package:  | ||||
|     name: | ||||
|     - ansible | ||||
| @@ -29,14 +29,14 @@ | ||||
|     state: latest | ||||
|   when: "1 == 0" | ||||
|  | ||||
| - name: Repo Remove Software | ||||
| - name: General | Software | Packages | Remove Software | ||||
|   package:  | ||||
|     name: | ||||
|     - cowsay # Sorry ;) | ||||
|     state: absent | ||||
|  | ||||
| # TODO: Confirm if Ubuntu still uses snap for critical components like GNOME. | ||||
| - name: Repo Remove Software (Besides Ubuntu) | ||||
| - name: General | Software | Packages | Remove Software (Besides Ubuntu) | ||||
|   package:  | ||||
|     name: | ||||
|     - snapd | ||||
|   | ||||
| @@ -1,16 +1,16 @@ | ||||
| --- | ||||
| 
 | ||||
| - name: Install Lynis | ||||
| - name: General | Tests | Lynis | Install | ||||
|   git:  | ||||
|     repo: https://github.com/CISOfy/lynis | ||||
|     dest: "{{ lynis_install_dir }}" | ||||
|     clone: yes | ||||
|     force: yes | ||||
| 
 | ||||
| - name: Run Lynis Audit System | ||||
| - name: General | Tests | Lynis | Run System Audit | ||||
|   shell: "{{ lynis_install_dir }}/lynis --no-colors audit system > {{ lynis_report }} 2>&1" | ||||
| 
 | ||||
| - name: Make Lynis Report Readable | ||||
| - name: General | Tests | Lynis | Make Report Readable | ||||
|   file: | ||||
|     path: "{{ lynis_report }}" | ||||
|     mode: '0444' | ||||
| @@ -1,12 +1,12 @@ | ||||
| --- | ||||
|  | ||||
| # Pre-reqs | ||||
| - name: Install Flatpak | ||||
| - name: Workstation | Linux | Flatpak | Install Flatpak | ||||
|   package: | ||||
|     name: flatpak | ||||
|     update_cache: yes | ||||
|  | ||||
| - name: Add Flathub for System | ||||
| - name: Workstation | Linux | Flatpak | Add Flathub for System | ||||
|   flatpak_remote: | ||||
|     name: flathub | ||||
|     state: present | ||||
| @@ -14,24 +14,24 @@ | ||||
|     flatpakrepo_url: https://dl.flathub.org/repo/flathub.flatpakrepo | ||||
|  | ||||
| # Hop into installs | ||||
| - name: Install Discord | ||||
| - name: Workstation | Linux | Flatpak | Install Discord | ||||
|   flatpak: | ||||
|     name: com.discordapp.Discord | ||||
|  | ||||
| - name: Install Shotcut | ||||
| - name: Workstation | Linux | Flatpak | Install Shotcut | ||||
|   flatpak: | ||||
|     name: org.shotcut.Shotcut | ||||
|  | ||||
| - name: Install Firefox | ||||
| - name: Workstation | Linux | Flatpak | Install Firefox | ||||
|   flatpak: | ||||
|     name: org.mozilla.firefox | ||||
|  | ||||
| - name: Install Thunderbird | ||||
| - name: Workstation | Linux | Flatpak | Install Thunderbird | ||||
|   flatpak: | ||||
|     name: org.mozilla.Thunderbird | ||||
|  | ||||
| # Remove any applicable repo software | ||||
| - name: Remove packages that may come with an OS but were just installed as Flatpak | ||||
| - name: Workstation | Linux | Flatpak | Remove Packages | ||||
|   package:  | ||||
|     name: | ||||
|     - "{{ firefox }}" | ||||
|   | ||||
		Reference in New Issue
	
	Block a user