Graham McIntire
fb5803c866
- bootstrap.yml: support pkg for FreeBSD sudo/python3 install - base role: FreeBSD package sets, sudoers paths, host key regen, admin group, usermod process-in-use tolerance - freebsd role: pkg update/upgrade tasks - general role: standalone hostname tasks (ungated from network.skip), hostname_override support - inspircd role: deploy configs for ca/us manero.org irc servers with vault-backed secrets - uisp role: download and run installer on fresh hosts, skip if already running - netbox role: stop services before usermod to avoid process-in-use failures - hosts: add irc_servers group, ca/us.manero.org (Tailscale), drop staging.towerops.net - all.yml: graham user gets static ed25519 key alongside github keys
113 lines
2 KiB
YAML
113 lines
2 KiB
YAML
---
|
|
managed_groups: []
|
|
managed_users: []
|
|
|
|
admin_group_map:
|
|
Debian: sudo
|
|
RedHat: wheel
|
|
FreeBSD: wheel
|
|
|
|
admin_group: "{{ admin_group_map.get(ansible_facts['os_family'], 'sudo') }}"
|
|
|
|
sudoers_dir_map:
|
|
Debian: /etc/sudoers.d
|
|
RedHat: /etc/sudoers.d
|
|
FreeBSD: /usr/local/etc/sudoers.d
|
|
Alpine: /etc/sudoers.d
|
|
|
|
sudoers_dir: "{{ sudoers_dir_map.get(ansible_facts['os_family'], '/etc/sudoers.d') }}"
|
|
|
|
sudoers_path_map:
|
|
Debian: /etc/sudoers
|
|
RedHat: /etc/sudoers
|
|
FreeBSD: /usr/local/etc/sudoers
|
|
Alpine: /etc/sudoers
|
|
|
|
sudoers_path: "{{ sudoers_path_map.get(ansible_facts['os_family'], '/etc/sudoers') }}"
|
|
|
|
visudo_path_map:
|
|
Debian: /usr/sbin/visudo
|
|
RedHat: /usr/sbin/visudo
|
|
FreeBSD: /usr/local/sbin/visudo
|
|
Alpine: /usr/sbin/visudo
|
|
|
|
visudo_path: "{{ visudo_path_map.get(ansible_facts['os_family'], '/usr/sbin/visudo') }}"
|
|
|
|
base_common_packages:
|
|
- git
|
|
- vim
|
|
- wget
|
|
- htop
|
|
- tmux
|
|
- rsync
|
|
- zsh
|
|
|
|
base_packages_by_os_family:
|
|
Debian:
|
|
- sudo
|
|
- jq
|
|
- sysstat
|
|
- smartmontools
|
|
- lm-sensors
|
|
- debconf-utils
|
|
- chrony
|
|
- python3
|
|
- python3-apt
|
|
RedHat:
|
|
- sudo
|
|
- jq
|
|
- sysstat
|
|
- smartmontools
|
|
- lm_sensors
|
|
- python3
|
|
FreeBSD:
|
|
- sudo
|
|
- python3
|
|
|
|
base_packages_by_distribution:
|
|
Ubuntu:
|
|
- lsof
|
|
- mosh
|
|
- unattended-upgrades
|
|
- silversearcher-ag
|
|
- net-tools
|
|
- locate
|
|
- fail2ban
|
|
- nethogs
|
|
- pv
|
|
- fzf
|
|
- qemu-guest-agent
|
|
- python3-apt
|
|
Debian:
|
|
- lsof
|
|
- mosh
|
|
- unattended-upgrades
|
|
- silversearcher-ag
|
|
- net-tools
|
|
- locate
|
|
- fail2ban
|
|
- nethogs
|
|
- pv
|
|
- fzf
|
|
- qemu-guest-agent
|
|
AlmaLinux:
|
|
- bind-utils
|
|
- lsof
|
|
- nano
|
|
- net-tools
|
|
- pv
|
|
- selinux-policy
|
|
- tar
|
|
- unzip
|
|
- qemu-guest-agent
|
|
- python3-libselinux
|
|
|
|
# Packages only available on specific AlmaLinux versions
|
|
# EL9 has mosh, mlocate, fail2ban via EPEL; EL10 does not yet
|
|
base_packages_almalinux_9:
|
|
- mosh
|
|
- mlocate
|
|
- fail2ban
|
|
|
|
base_packages_almalinux_10:
|
|
- plocate
|