Install actual on Raspberry Pi

This commit is contained in:
Thomas Kleinendorst 2024-04-12 13:34:45 +02:00
parent 64fa1562dd
commit 6c0425418e
9 changed files with 109 additions and 8 deletions

View file

@ -9,13 +9,16 @@
roles:
# These roles are disabled after they have being applied once for performance reasons, it should be safe to enable them again.
# Notice that this role changes some settings on reruns (on the "Change various sysctl-settings" task), doesn't seem problematic though.
# - role: devsec.hardening.os_hardening
# become: true
# - role: devsec.hardening.ssh_hardening
# become: true
# - role: zsh
- role: devsec.hardening.os_hardening
become: true
- role: devsec.hardening.ssh_hardening
become: true
- role: snapcraft
- role: user
- role: pi-hole
- role: cloudflare-ddns
- role: reverse-proxy
- role: actual
vars:
# devsec.hardening.os_hardening vars:
os_auth_pw_max_age: 99999 # Effectively disables the setting as mentioned in the docs.