--- - name: (basic.yml) Ensure timezone is is correct timezone: name={{ time_zone }} tags: - timezone - name: (basic.yml) Ensure locales are present locale_gen: name: "{{ item }}" state: present with_items: "{{ locales }}" tags: - locales - name: (basic.yml) Create a symbolic link /bin/sh -> bash file: src: bash dest: /bin/sh owner: root group: root state: link when: - "groups['file_server']|string is search(inventory_hostname)" tags: - symlink-sh - name: (basic.yml) Check file '/etc/systemd/system.conf' exists stat: path: /etc/systemd/system register: etc_systemd_system_conf when: - set_default_limit_nofile|bool == true - name: (basic.yml) Change DefaultLimitNOFILE to 1048576 lineinfile: dest: /etc/systemd/system.conf state: present regexp: '^DefaultLimitNOFILE' line: 'DefaultLimitNOFILE=1048576' insertafter: '^#DefaultLimitNOFILE' when: - set_default_limit_nofile|bool == true - etc_systemd_system_conf.stat.exists == true tags: - systemd-nofiles - name: (basic.yml) Check file '/etc/security/limits.conf.ORIG' exists stat: path: /etc/security/limits.conf.ORIG register: etc_security_limits_conf_ORIG tags: - limits-conf - name: (basic.yml) Backup installation version of file '/etc/security/limits.conf' command: cp -a /etc/security/limits.conf /etc/security/limits.conf.ORIG when: etc_security_limits_conf_ORIG.stat.exists == False tags: - limits-conf - name: (basic.yml) Create new sshd_config from template limits.conf.j2 template: src: etc/security/limits.conf.j2 dest: /etc/security/limits.conf owner: root group: root mode: 0644 tags: - limits-conf # - /etc/hosts - name: (basic.yml) Check file '/etc/hosts.ORIG' exists stat: path: /etc/hosts.ORIG register: etc_hosts_ORIG when: - "groups['file_server']|string is search(inventory_hostname)" tags: - etc_hosts - name: (basic.yml) Backup installation version of file '/etc/hosts' command: cp -a /etc/hosts /etc/hosts.ORIG when: - "groups['file_server']|string is search(inventory_hostname)" - etc_hosts_ORIG.stat.exists == False tags: - etc_hosts - name: (basic.yml) addjust '/etc/hosts' add nis-server .. lineinfile: path: /etc/hosts regexp: '^192\.168\.82\.' line: '{{ nis_server_address }} {{ nis_server_name }} {{ nis_server_name.split(".")[0] }}' when: - "groups['nis_server']|string is search(inventory_hostname)" tags: - etc_hosts