forked from ccchb/ansible
debian: Do not change shell and use debian-owned facilities for networking
This commit is contained in:
parent
ec110faf41
commit
2140a1428c
2 changed files with 18 additions and 62 deletions
|
@ -1,39 +1,4 @@
|
||||||
---
|
---
|
||||||
- name: Install defaults
|
|
||||||
package:
|
|
||||||
name:
|
|
||||||
- zsh
|
|
||||||
|
|
||||||
- name: Download .zshrc from grml
|
|
||||||
get_url:
|
|
||||||
url: https://raw.githubusercontent.com/grml/grml-etc-core/v0.12.5/etc/zsh/zshrc
|
|
||||||
dest: /etc/zsh/zshrc
|
|
||||||
checksum: sha256:ad88c76951693c2f9c38773ed2602a9fd5c74431615c4a23aaff679b295919ce
|
|
||||||
validate_certs: false
|
|
||||||
|
|
||||||
- name: Update SSH configuration
|
|
||||||
notify: reload sshd
|
|
||||||
replace:
|
|
||||||
dest: /etc/ssh/sshd_config
|
|
||||||
regexp: '^([\#\s]*)?{{ item.key }}\s+([\w_-]+)'
|
|
||||||
replace: "{{item.key}} {{item.value}}"
|
|
||||||
with_items:
|
|
||||||
- key: PermitRootLogin
|
|
||||||
value: without-password
|
|
||||||
- key: PasswordAuthentication
|
|
||||||
value: 'no'
|
|
||||||
- key: ChallengeResponseAuthentication
|
|
||||||
value: 'no'
|
|
||||||
- key: PrintLastLog
|
|
||||||
value: 'yes'
|
|
||||||
- key: UseDNS
|
|
||||||
value: 'no'
|
|
||||||
|
|
||||||
- name: Change shell of user root
|
|
||||||
user:
|
|
||||||
name: root
|
|
||||||
shell: /usr/bin/zsh
|
|
||||||
|
|
||||||
- name: Enable sshd
|
- name: Enable sshd
|
||||||
systemd:
|
systemd:
|
||||||
name: sshd
|
name: sshd
|
||||||
|
@ -44,32 +9,7 @@
|
||||||
notify: restart network
|
notify: restart network
|
||||||
when: ipv4 is defined or ipv6 is defined
|
when: ipv4 is defined or ipv6 is defined
|
||||||
template:
|
template:
|
||||||
src: systemd.network
|
src: interfaces.j2
|
||||||
dest: /etc/systemd/network/main.network
|
dest: /etc/network/interfaces
|
||||||
owner: root
|
owner: root
|
||||||
mode: 644
|
mode: 644
|
||||||
|
|
||||||
- name: enable systemd-networkd
|
|
||||||
notify: restart network
|
|
||||||
systemd:
|
|
||||||
name: systemd-networkd
|
|
||||||
state: started
|
|
||||||
enabled: yes
|
|
||||||
|
|
||||||
- name: disable networking
|
|
||||||
systemd:
|
|
||||||
name: networking
|
|
||||||
enabled: no
|
|
||||||
|
|
||||||
- name: start systemd-resolved
|
|
||||||
systemd:
|
|
||||||
name: systemd-resolved
|
|
||||||
state: started
|
|
||||||
enabled: yes
|
|
||||||
|
|
||||||
- name: symling /etc/resolve
|
|
||||||
file:
|
|
||||||
src: /run/systemd/resolve/stub-resolv.conf
|
|
||||||
dest: /etc/resolv.conf
|
|
||||||
state: link
|
|
||||||
force: yes
|
|
||||||
|
|
16
roles/debian/templates/interfaces.j2
Normal file
16
roles/debian/templates/interfaces.j2
Normal file
|
@ -0,0 +1,16 @@
|
||||||
|
# The primary network interface
|
||||||
|
allow-hotplug enp0s3
|
||||||
|
{% if ipv4 is defined %}
|
||||||
|
iface enp0s3 inet static
|
||||||
|
address {{ipv4}}/31
|
||||||
|
gateway {{ipv4route}}
|
||||||
|
# dns-* options are implemented by the resolvconf package, if installed
|
||||||
|
dns-nameservers {{ipv4route}}
|
||||||
|
dns-search emma.ccchb.de
|
||||||
|
{% endif %}
|
||||||
|
|
||||||
|
{% if ipv6 is defined %}
|
||||||
|
iface enp0s3 inet6 static
|
||||||
|
address {{ipv6}}/127
|
||||||
|
gateway {{ipv6route}}
|
||||||
|
{% endif %}
|
Loading…
Reference in a new issue