Rearange existing roles to make more sense

This commit is contained in:
Thomas Kleinendorst 2024-04-14 12:29:17 +02:00
parent bec00118c0
commit e06547e25c
11 changed files with 104 additions and 104 deletions

View file

@ -0,0 +1,57 @@
---
- name: Install basic packages
become: true
ansible.builtin.apt:
pkg:
- git
- vim
- ufw
- podman
- snapd
state: present
- name: Install Snap Core
become: true
community.general.snap:
name: core
state: present
- name: Set default policy (incoming)
become: true
community.general.ufw:
direction: incoming
policy: deny
notify: Restart ufw
- name: Set default policy (outgoing)
become: true
community.general.ufw:
direction: outgoing
policy: allow
notify: Restart ufw
- name: Set default policy (routed)
become: true
community.general.ufw:
direction: routed
policy: allow
notify: Restart ufw
- name: Allow forwarding in ufw
become: true
ansible.builtin.lineinfile:
path: /etc/ufw/sysctl.conf
regexp: '^#net/ipv4/ip_forward=1$'
line: 'net/ipv4/ip_forward=1'
notify: Restart ufw
- name: Allow all access to ssh
become: true
community.general.ufw:
rule: allow
port: ssh
proto: tcp
notify: Restart ufw
- name: Enable ufw
become: true
community.general.ufw:
state: enabled
- name: Install Snapcraft
become: true
ansible.builtin.apt:
name:
state: present