diff --git a/ansible/playbook.yaml b/ansible/playbook.yaml index 623a887..6552d27 100644 --- a/ansible/playbook.yaml +++ b/ansible/playbook.yaml @@ -32,6 +32,7 @@ - media - kubernetes - google_cloud_sdk + - ansible - hosts: nat_dhcp vars: diff --git a/ansible/roles/ansible/defaults/main.yaml b/ansible/roles/ansible/defaults/main.yaml new file mode 100644 index 0000000..2da3041 --- /dev/null +++ b/ansible/roles/ansible/defaults/main.yaml @@ -0,0 +1 @@ +install_ansible: true diff --git a/ansible/roles/ansible/tasks/common.yaml b/ansible/roles/ansible/tasks/common.yaml new file mode 100644 index 0000000..fef1101 --- /dev/null +++ b/ansible/roles/ansible/tasks/common.yaml @@ -0,0 +1,15 @@ +- import_tasks: tasks/freebsd.yaml + when: 'os_flavor == "freebsd"' + +- import_tasks: tasks/linux.yaml + when: 'os_flavor == "linux"' + +- include_tasks: + file: tasks/peruser.yaml + apply: + become: yes + become_user: "{{ initialize_user }}" + when: users is defined + loop: "{{ users | dict2items | community.general.json_query('[?value.initialize==`true`].key') }}" + loop_control: + loop_var: initialize_user diff --git a/ansible/roles/ansible/tasks/freebsd.yaml b/ansible/roles/ansible/tasks/freebsd.yaml new file mode 100644 index 0000000..03075b6 --- /dev/null +++ b/ansible/roles/ansible/tasks/freebsd.yaml @@ -0,0 +1,6 @@ +- name: Install packages + package: + name: + - py39-ansible + - ansible-sshjail + state: present diff --git a/ansible/roles/ansible/tasks/linux.yaml b/ansible/roles/ansible/tasks/linux.yaml new file mode 100644 index 0000000..bfaf17e --- /dev/null +++ b/ansible/roles/ansible/tasks/linux.yaml @@ -0,0 +1,28 @@ +# - name: Build aur packages +# register: buildaur +# become_user: "{{ build_user.name }}" +# command: "aurutils-sync --no-view {{ item }}" +# args: +# creates: "/var/cache/pacman/custom/{{ item }}-*.pkg.tar.*" +# loop: +# - foo + +# - name: Update cache +# when: buildaur.changed +# pacman: +# name: [] +# state: present +# update_cache: true + +- name: Install packages + package: + name: + - ansible + state: present + +- name: Install sshjail plugin + ansible.builtin.get_url: + url: https://raw.githubusercontent.com/austinhyde/ansible-sshjail/e712c537ecdfc7a660f222fbac4172dd715fc130/sshjail.py + dest: /usr/share/ansible/plugins/connection_plugins/sshjail.py + mode: '0555' + checksum: sha512:730c887ae7bbf2de34da44fb10a45fdeff649e3f2447df821c93ef02a21ecbef7db2fd57f1fc85fcd0b5b86fa30aa2b9ef143865d1e5086620c7dbe0633207cd diff --git a/ansible/roles/ansible/tasks/main.yaml b/ansible/roles/ansible/tasks/main.yaml new file mode 100644 index 0000000..4f8cc32 --- /dev/null +++ b/ansible/roles/ansible/tasks/main.yaml @@ -0,0 +1,2 @@ +- import_tasks: tasks/common.yaml + when: install_ansible diff --git a/ansible/roles/ansible/tasks/peruser.yaml b/ansible/roles/ansible/tasks/peruser.yaml new file mode 100644 index 0000000..111e886 --- /dev/null +++ b/ansible/roles/ansible/tasks/peruser.yaml @@ -0,0 +1,29 @@ +- include_role: + name: per_user + +# - name: Create directories +# file: +# name: "{{ account_homedir.stdout }}/{{ item }}" +# state: directory +# mode: 0700 +# owner: "{{ account_name.stdout }}" +# group: "{{ group_name.stdout }}" +# loop: +# - ".config/foo" + +# - name: Copy files +# copy: +# src: "files/{{ item.src }}" +# dest: "{{ account_homedir.stdout }}/{{ item.dest }}" +# mode: 0600 +# owner: "{{ account_name.stdout }}" +# group: "{{ group_name.stdout }}" +# loop: +# - src: foo.conf +# dest: .config/foo/foo.conf + +- import_tasks: tasks/peruser_freebsd.yaml + when: 'os_flavor == "freebsd"' + +- import_tasks: tasks/peruser_linux.yaml + when: 'os_flavor == "linux"' diff --git a/ansible/roles/ansible/tasks/peruser_freebsd.yaml b/ansible/roles/ansible/tasks/peruser_freebsd.yaml new file mode 100644 index 0000000..e69de29 diff --git a/ansible/roles/ansible/tasks/peruser_linux.yaml b/ansible/roles/ansible/tasks/peruser_linux.yaml new file mode 100644 index 0000000..e69de29