infra/ansible/roles/debian/tasks/main.yml
2025-05-30 13:24:38 -05:00

15 lines
358 B
YAML

- name: "Install updates"
ansible.builtin.apt:
name: "*"
state: latest
update_cache: true
cache_valid_time: 3600
force_apt_get: true
autoremove: true
autoclean: true
- name: "Secure shared memory"
ansible.builtin.lineinfile:
path: /etc/fstab
state: present
line: "tmpfs /run/shm tmpfs defaults,noexec,nosuid 0 0"