Added tags to several tasks, and added tasks that allow import of GPG private keys to remote host
This commit is contained in:
@@ -15,6 +15,13 @@
|
||||
# ansible_password: "{{ passwords[0].password }}"
|
||||
# ansible_ssh_pass: "{{ passwords[0].username }}"
|
||||
# ansible_ssh_password: "{{ passwords[0].username }}"
|
||||
ansible_python_interpreter: “{{ ansible_playbook_python }}”
|
||||
personal_computers: locals # @NOTE can change to *_households group or {{ name }}_{{ surname }} group name
|
||||
vars_prompt:
|
||||
- name: gpg_import_passwords
|
||||
prompt: Enter space-wrapped colon -separated list of GPG private key passwords
|
||||
unsafe: yes
|
||||
private: yes
|
||||
tasks:
|
||||
- name: Disable shell access for root
|
||||
ansible.builtin.include_role:
|
||||
@@ -41,6 +48,7 @@
|
||||
state: present
|
||||
tags:
|
||||
- default
|
||||
- source_sys_bashrc
|
||||
- name: Create global bash functions
|
||||
become: yes
|
||||
ansible.builtin.copy:
|
||||
@@ -55,6 +63,7 @@
|
||||
state: present
|
||||
tags:
|
||||
- default
|
||||
- source_sys_bashrc
|
||||
- name: Register bash aliases and functions to global bashrc
|
||||
become: yes
|
||||
ansible.builtin.blockinfile:
|
||||
@@ -77,6 +86,7 @@
|
||||
state: present
|
||||
tags:
|
||||
- default
|
||||
- source_sys_bashrc
|
||||
- name: Start XDG configuration tasks if in servers group
|
||||
when: "'servers' in group_names and ansible_connection != 'local'"
|
||||
become: yes
|
||||
@@ -105,9 +115,10 @@
|
||||
state: present
|
||||
tags:
|
||||
- default
|
||||
- create_xdg_config
|
||||
- servers_exclusive
|
||||
- name: Start XDG configuration tasks if in locals group
|
||||
when: "'locals' in group_names or ansible_connection == 'local'"
|
||||
- name: Start XDG configuration tasks if current host in specified group
|
||||
when: "personal_computers in group_names or ansible_connection == 'local'"
|
||||
become: yes
|
||||
block:
|
||||
- name: Create XDG user home directory environment variables
|
||||
@@ -134,9 +145,10 @@
|
||||
state: present
|
||||
tags:
|
||||
- default
|
||||
- create_xdg_config
|
||||
- locals_exclusive
|
||||
- name: Start SSH configuration tasks if in locals group
|
||||
when: "'locals' in group_names or ansible_connection == 'local'"
|
||||
- name: Start SSH configuration tasks if current host in specified group
|
||||
when: "personal_computers in group_names or ansible_connection == 'local'"
|
||||
become: yes
|
||||
block:
|
||||
- name: Create user SSH configuration
|
||||
@@ -152,5 +164,20 @@
|
||||
state: present
|
||||
tags:
|
||||
- default
|
||||
- create_ssh_config
|
||||
- locals_exclusive
|
||||
- name: Import GPG private keys
|
||||
ansible.builtin.include_role:
|
||||
name: lockdown
|
||||
defaults_from: main
|
||||
vars_from: main
|
||||
handlers_from: main
|
||||
tasks_from: gpg
|
||||
vars:
|
||||
gpg_keys_origin_host: localhost
|
||||
gpg_origin_private_key_passwords: "{{ gpg_import_passwords | split(' : ') }}"
|
||||
tags:
|
||||
- default
|
||||
- import_gpg_privkeys
|
||||
|
||||
|
Reference in New Issue
Block a user