src.nth.io/

summaryrefslogtreecommitdiff
path: root/roles/base
diff options
context:
space:
mode:
Diffstat (limited to 'roles/base')
-rw-r--r--roles/base/defaults/main.yaml13
-rw-r--r--roles/base/files/jail.local10
-rw-r--r--roles/base/tasks/main.yml42
-rw-r--r--roles/base/templates/wpa_supplicant.conf.j214
4 files changed, 0 insertions, 79 deletions
diff --git a/roles/base/defaults/main.yaml b/roles/base/defaults/main.yaml
deleted file mode 100644
index b26755a..0000000
--- a/roles/base/defaults/main.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
----
-
-rpi_base_enable_wifi: True
-rpi_base_timezone: "America/Chicago"
-rpi_base_apt_packages:
- - "log2ram"
- - "fail2ban"
- - "unattended-upgrades"
- - "emacs-nox"
- - "htop"
- - "jq"
- - "tree"
- - "iperf3"
diff --git a/roles/base/files/jail.local b/roles/base/files/jail.local
deleted file mode 100644
index a5cabc4..0000000
--- a/roles/base/files/jail.local
+++ /dev/null
@@ -1,10 +0,0 @@
-[ssh]
-
-enabled = true
-port = ssh
-filter = sshd
-logpath = /var/log/auth.log
-bantime = 900
-banaction = iptables-allports
-findtime = 900
-maxretry = 3
diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
deleted file mode 100644
index 85045a5..0000000
--- a/roles/base/tasks/main.yml
+++ /dev/null
@@ -1,42 +0,0 @@
----
-
-- name: turn swap off
- become: yes
- command: "swapoff -a"
- changed_when: false
-
-- name: remove swap apt package
- become: yes
- apt: state="absent" name="dphys-swapfile"
-
-- name: add log2ram apt key
- become: yes
- apt_key: url="https://azlux.fr/repo.gpg.key"
-
-- name: add log2ram apt repo
- become: yes
- apt_repository: repo="deb http://packages.azlux.fr/debian/ buster main"
-
-- name: set timezone
- become: yes
- timezone: name="{{rpi_base_timezone}}"
-
-- name: setup wifi
- become: yes
- template: src="wpa_supplicant.conf.j2" dest="/etc/wpa_supplicant/wpa_supplicant.conf" mode="0644"
-
-- name: update apt package cache
- become: yes
- apt: upgrade="dist" autoremove="yes" autoclean="yes" update_cache="yes" cache_valid_time="3600"
-
-- name: install extra apt packages
- become: yes
- apt: name="{{rpi_base_apt_packages}}" state="latest"
-
-- name: install fail2ban config
- become: yes
- copy: src="jail.local" dest="/etc/fail2ban/jail.local"
-
-- name: authorize admin ssh keys
- become: yes
- authorized_key: user="{{ansible_user}}" key="https://github.com/{{github_user}}.keys"
diff --git a/roles/base/templates/wpa_supplicant.conf.j2 b/roles/base/templates/wpa_supplicant.conf.j2
deleted file mode 100644
index c1312d0..0000000
--- a/roles/base/templates/wpa_supplicant.conf.j2
+++ /dev/null
@@ -1,14 +0,0 @@
-# {{ansible_managed}}
-
-country=US
-ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
-update_config=1
-{% for network in wpa_networks %}
-
-network={
- ssid="{{network.ssid}}"
- psk="{{network.psk}}"
- disabled={% if rpi_base_enable_wifi %}0{% else %}1{% endif %}
-
-}
-{% endfor %}