106 lines
2.5 KiB
YAML
106 lines
2.5 KiB
YAML
---
|
|
|
|
- name: (basic.yml) Ensure timezone is is correct
|
|
timezone: name={{ time_zone }}
|
|
tags:
|
|
- timezone
|
|
|
|
|
|
- name: (basic.yml) Ensure locales are present
|
|
locale_gen:
|
|
name: "{{ item }}"
|
|
state: present
|
|
with_items: "{{ locales }}"
|
|
tags:
|
|
- locales
|
|
|
|
|
|
- name: (basic.yml) Create a symbolic link /bin/sh -> bash
|
|
file:
|
|
src: bash
|
|
dest: /bin/sh
|
|
owner: root
|
|
group: root
|
|
state: link
|
|
when:
|
|
- "groups['file_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- symlink-sh
|
|
|
|
|
|
- name: (basic.yml) Check file '/etc/systemd/system.conf' exists
|
|
stat:
|
|
path: /etc/systemd/system
|
|
register: etc_systemd_system_conf
|
|
when:
|
|
- set_default_limit_nofile|bool == true
|
|
|
|
|
|
- name: (basic.yml) Change DefaultLimitNOFILE to 1048576
|
|
lineinfile:
|
|
dest: /etc/systemd/system.conf
|
|
state: present
|
|
regexp: '^DefaultLimitNOFILE'
|
|
line: 'DefaultLimitNOFILE=1048576'
|
|
insertafter: '^#DefaultLimitNOFILE'
|
|
when:
|
|
- set_default_limit_nofile|bool == true
|
|
- etc_systemd_system_conf.stat.exists == true
|
|
tags:
|
|
- systemd-nofiles
|
|
|
|
|
|
- name: (basic.yml) Check file '/etc/security/limits.conf.ORIG' exists
|
|
stat:
|
|
path: /etc/security/limits.conf.ORIG
|
|
register: etc_security_limits_conf_ORIG
|
|
tags:
|
|
- limits-conf
|
|
|
|
- name: (basic.yml) Backup installation version of file '/etc/security/limits.conf'
|
|
command: cp -a /etc/security/limits.conf /etc/security/limits.conf.ORIG
|
|
when: etc_security_limits_conf_ORIG.stat.exists == False
|
|
tags:
|
|
- limits-conf
|
|
|
|
|
|
- name: (basic.yml) Create new sshd_config from template limits.conf.j2
|
|
template:
|
|
src: etc/security/limits.conf.j2
|
|
dest: /etc/security/limits.conf
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
tags:
|
|
- limits-conf
|
|
|
|
# - /etc/hosts
|
|
|
|
- name: (basic.yml) Check file '/etc/hosts.ORIG' exists
|
|
stat:
|
|
path: /etc/hosts.ORIG
|
|
register: etc_hosts_ORIG
|
|
when:
|
|
- "groups['file_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- etc_hosts
|
|
|
|
- name: (basic.yml) Backup installation version of file '/etc/hosts'
|
|
command: cp -a /etc/hosts /etc/hosts.ORIG
|
|
when:
|
|
- "groups['file_server']|string is search(inventory_hostname)"
|
|
- etc_hosts_ORIG.stat.exists == False
|
|
tags:
|
|
- etc_hosts
|
|
|
|
- name: (basic.yml) addjust '/etc/hosts' add nis-server ..
|
|
lineinfile:
|
|
path: /etc/hosts
|
|
regexp: '^192\.168\.'
|
|
line: '{{ nis_server_address }} {{ nis_server_name }} {{ nis_server_name.split(".")[0] }}'
|
|
when:
|
|
- "groups['nis_server']|string is search(inventory_hostname)"
|
|
tags:
|
|
- etc_hosts
|
|
|