58 lines
1.5 KiB
YAML
58 lines
1.5 KiB
YAML
---
|
|
# Install and configure doas.
|
|
|
|
- name: General | Software | DoAs | Facts
|
|
ansible.builtin.set_fact:
|
|
doas_config: |
|
|
permit persist :wheel as root
|
|
permit persist :admin as root
|
|
permit persist :sudo as root
|
|
doas_conf_file_linux: /etc/doas.conf
|
|
doas_conf_file_bsd: /usr/local/etc/doas.conf
|
|
|
|
- name: General | Software | DoAs | Install
|
|
ansible.builtin.package:
|
|
name:
|
|
- doas
|
|
register: doas_install
|
|
ignore_errors: true
|
|
|
|
- name: General | Software | DoAs | Configure [Linux]
|
|
ansible.builtin.blockinfile:
|
|
path: "{{ doas_conf_file_linux }}"
|
|
block: |
|
|
{{ doas_config }}
|
|
marker: '# {mark} MANAGED BY ANSIBLE | doas Linux'
|
|
state: present
|
|
create: true
|
|
backup: true
|
|
mode: "644"
|
|
when: not doas_install.failed and ansible_system in ("Linux")
|
|
|
|
- name: General | Software | DoAs | Configure [BSD]
|
|
ansible.builtin.blockinfile:
|
|
path: "{{ doas_conf_file_linux }}"
|
|
block: |
|
|
{{ doas_config }}
|
|
marker: '# {mark} MANAGED BY ANSIBLE | doas BSD'
|
|
state: present
|
|
create: true
|
|
backup: true
|
|
mode: "644"
|
|
when: not doas_install.failed and ansible_system in ("FreeBSD")
|
|
|
|
- name: General | Software | DoAs | Configure [Other]
|
|
ansible.builtin.blockinfile:
|
|
path: "{{ item }}"
|
|
block: |
|
|
{{ doas_config }}
|
|
marker: '# {mark} MANAGED BY ANSIBLE | doas Other'
|
|
state: present
|
|
create: true
|
|
backup: true
|
|
mode: "644"
|
|
loop:
|
|
- "{{ doas_conf_file_linux }}"
|
|
- "{{ doas_conf_file_bsd }}"
|
|
when: not doas_install.failed and ansible_system not in ("Linux", "FreeBSD")
|