3 ### Tasks applicable for all hosts.
7 ###--------------------------------------------------------------------------
8 ### General permissions.
10 - name: fix permissions in /root
11 tags: [perms, root-perms]
12 file: path=/root/ mode=0750 owner=root group=root
14 ###--------------------------------------------------------------------------
17 - name: install common PKI files
19 copy: src=pki/{{ item }} dest=/etc/ca/
26 - name: install /etc/pki/CA link
28 file: path=/etc/pki/CA/cacert.pem state=link src=../../ca/ca.cert
30 ###--------------------------------------------------------------------------
31 ### NTP configuration.
33 - name: install NTP client configuration files
34 tags: [ntp, ntp-client]
35 copy: src=ntp-client/ntp.conf dest=/etc/
36 when: ('ntp') not in server |default([])
39 ###--------------------------------------------------------------------------
40 ### Network databases.
42 - name: install netdb files
44 copy: src=netdb/{{ item }} dest=/etc/
50 ###--------------------------------------------------------------------------
51 ### SSH configuration.
53 - name: install SSH configuration files
54 tags: [ssh, ssh-config]
55 copy: src=ssh-config/{{ item }} dest=/etc/ssh/
65 - name: "create root's .ssh/ directory"
67 file: path=/root/.ssh/ state=directory mode=0750
69 - name: install main keys for root SSH access
71 template: src=ssh-root/authkeys.base dest=/root/.ssh/authkeys.base
72 notify: make in /root/.ssh/
74 - name: install keys for root SSH access
76 copy: src=ssh-root/{{ item }} dest=/root/.ssh/
77 notify: make in /root/.ssh/
83 ###--------------------------------------------------------------------------
86 - name: install backup filters
87 tags: [backup, backup-filters]
88 copy: src=backup/filter.{{ item.label }} dest={{ item.dest }}/.rsync-backup
90 - { label: 'home', dest: '/home' }
91 - { label: 'var-spool', dest: '/var/spool' }
93 - name: install required backup scripts on non-Debian hosts
94 tags: [backup, backup-scripts]
95 copy: src=backup/fshash dest=/usr/local/bin/
98 ###--------------------------------------------------------------------------
99 ### Other miscellaneous files.
101 - name: install sudo configuration
103 copy: src=sudo/sudoers dest=/etc/
105 - name: install common scripts
107 copy: src=scripts/{{ item }} dest=/usr/local/bin/
109 - fetch-unpack-archive
112 - name: install root Git configuration
114 copy: src=root/gitconfig dest=/root/.gitconfig
116 ###----- That's all, folks --------------------------------------------------