78 lines
2.3 KiB
YAML
78 lines
2.3 KiB
YAML
---
|
|
# Enable and disable services.
|
|
|
|
## Fake SSHFS ##
|
|
|
|
- name: General | Software | Services | Create SSHFS rc.conf Entry (FreeBSD)
|
|
blockinfile:
|
|
path: /etc/rc.conf
|
|
block: |
|
|
fusefs_enable="YES"
|
|
marker: "# {mark} MANAGED BY ANSIBLE | SSHFS"
|
|
state: present
|
|
backup: yes
|
|
when: ansible_system == "FreeBSD"
|
|
|
|
- name: General | Software | Services | Load SSHFS (FreeBSD)
|
|
shell: kldload fusefs
|
|
args:
|
|
warn: false
|
|
when: ansible_system == "FreeBSD"
|
|
|
|
|
|
## CUPS ##
|
|
|
|
- name: General | Software | Services | Disable CUPS Daemon
|
|
service:
|
|
name: "{{ cups }}"
|
|
pattern: "{{ cups_pattern }}"
|
|
state: stopped
|
|
enabled: no
|
|
|
|
- name: General | Software | Services | Disable CUPS-Browse Daemon
|
|
service:
|
|
name: "{{ cups_browse }}"
|
|
pattern: "{{ cups_browse_pattern }}"
|
|
state: stopped
|
|
enabled: no
|
|
|
|
|
|
## SSHD ##
|
|
|
|
#- name: General | Software | Services | Create SSHFS rc.conf Entry (FreeBSD)
|
|
# lineinfile:
|
|
# path: /etc/rc.conf
|
|
# regexp: '^sshd_enable='
|
|
# line: 'sshd_enable="YES" # MANAGED BY ANSIBLE'
|
|
# state: present
|
|
# create: yes
|
|
# backup: yes
|
|
# when: ansible_system == "FreeBSD"
|
|
|
|
- name: General | Software | Services | Create SSHFS rc.conf Entry (FreeBSD)
|
|
lineinfile:
|
|
path: "{{ sshd_config }}"
|
|
regexp: '{{ item.key }}'
|
|
line: '{{ item.value }} # MANAGED BY ANSIBLE'
|
|
state: present
|
|
create: no
|
|
backup: yes
|
|
loop:
|
|
- { "key": '^[\#]?PermitRootLogin', "value": 'PermitRootLogin no'}
|
|
- { "key": '^[\#]?AllowTcpForwarding', "value": 'AllowTcpForwarding no'}
|
|
- { "key": '^[\#]?ClientAliveCountMax', "value": 'ClientAliveCountMax 2'}
|
|
- { "key": '^[\#]?Compression', "value": 'Compression no'}
|
|
- { "key": '^[\#]?LogLevel', "value": 'LogLevel verbose'}
|
|
- { "key": '^[\#]?MaxAuthTries', "value": 'MaxAuthTries 3'}
|
|
- { "key": '^[\#]?MaxSessions', "value": 'MaxSessions 2'}
|
|
#- { "key": '^[\#]?Port', "value": 'Port '}
|
|
- { "key": '^[\#]?TCPKeepAlive', "value": 'TCPKeepAlive no'}
|
|
- { "key": '^[\#]?X11Forwarding', "value": 'X11Forwarding no'}
|
|
- { "key": '^[\#]?AllowAgentForwarding', "value": 'AllowAgentForwarding no'}
|
|
|
|
- name: General | Software | Services | Enable SSHD (Linux?)
|
|
service:
|
|
name: "{{ sshd }}"
|
|
pattern: "{{ sshd_pattern }}"
|
|
state: started
|
|
enabled: yes |