diff options
Diffstat (limited to 'roles/base')
| -rw-r--r-- | roles/base/defaults/main.yaml | 13 | ||||
| -rw-r--r-- | roles/base/files/jail.local | 10 | ||||
| -rw-r--r-- | roles/base/tasks/main.yml | 42 | ||||
| -rw-r--r-- | roles/base/templates/wpa_supplicant.conf.j2 | 14 |
4 files changed, 0 insertions, 79 deletions
diff --git a/roles/base/defaults/main.yaml b/roles/base/defaults/main.yaml deleted file mode 100644 index b26755a..0000000 --- a/roles/base/defaults/main.yaml +++ /dev/null @@ -1,13 +0,0 @@ ---- - -rpi_base_enable_wifi: True -rpi_base_timezone: "America/Chicago" -rpi_base_apt_packages: - - "log2ram" - - "fail2ban" - - "unattended-upgrades" - - "emacs-nox" - - "htop" - - "jq" - - "tree" - - "iperf3" diff --git a/roles/base/files/jail.local b/roles/base/files/jail.local deleted file mode 100644 index a5cabc4..0000000 --- a/roles/base/files/jail.local +++ /dev/null @@ -1,10 +0,0 @@ -[ssh] - -enabled = true -port = ssh -filter = sshd -logpath = /var/log/auth.log -bantime = 900 -banaction = iptables-allports -findtime = 900 -maxretry = 3 diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml deleted file mode 100644 index 85045a5..0000000 --- a/roles/base/tasks/main.yml +++ /dev/null @@ -1,42 +0,0 @@ ---- - -- name: turn swap off - become: yes - command: "swapoff -a" - changed_when: false - -- name: remove swap apt package - become: yes - apt: state="absent" name="dphys-swapfile" - -- name: add log2ram apt key - become: yes - apt_key: url="https://azlux.fr/repo.gpg.key" - -- name: add log2ram apt repo - become: yes - apt_repository: repo="deb http://packages.azlux.fr/debian/ buster main" - -- name: set timezone - become: yes - timezone: name="{{rpi_base_timezone}}" - -- name: setup wifi - become: yes - template: src="wpa_supplicant.conf.j2" dest="/etc/wpa_supplicant/wpa_supplicant.conf" mode="0644" - -- name: update apt package cache - become: yes - apt: upgrade="dist" autoremove="yes" autoclean="yes" update_cache="yes" cache_valid_time="3600" - -- name: install extra apt packages - become: yes - apt: name="{{rpi_base_apt_packages}}" state="latest" - -- name: install fail2ban config - become: yes - copy: src="jail.local" dest="/etc/fail2ban/jail.local" - -- name: authorize admin ssh keys - become: yes - authorized_key: user="{{ansible_user}}" key="https://github.com/{{github_user}}.keys" diff --git a/roles/base/templates/wpa_supplicant.conf.j2 b/roles/base/templates/wpa_supplicant.conf.j2 deleted file mode 100644 index c1312d0..0000000 --- a/roles/base/templates/wpa_supplicant.conf.j2 +++ /dev/null @@ -1,14 +0,0 @@ -# {{ansible_managed}} - -country=US -ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev -update_config=1 -{% for network in wpa_networks %} - -network={ - ssid="{{network.ssid}}" - psk="{{network.psk}}" - disabled={% if rpi_base_enable_wifi %}0{% else %}1{% endif %} - -} -{% endfor %} |
