Commit Graph
100 Commits
Author SHA1 Message Date
Alex Tavarez 72395382d3 Changed order of preferred paths for Ansible 2025-11-18 21:27:01 -05:00
Alex Tavarez fd5cdca0e9 Excluded collections from version control tracking 2025-11-18 21:25:57 -05:00
Alex Tavarez 0a072b4c90 Added handler for nextcloud, to configure it after it has been installed by snapd 2025-11-17 09:39:49 -05:00
Alex Tavarez 736277c377 Added handler for snapd that installs listed snap packages after snapd itself is installed 2025-11-17 09:37:43 -05:00
Alex Tavarez b386f5e363 Added snap software packages and an LDAP library package for PHP 2025-11-17 09:37:04 -05:00
Alex Tavarez da694910c6 Added snap software packages and an LDAP library package for PHP 2025-11-17 09:36:19 -05:00
Alex Tavarez 93bc285f3d Started creation of play after VPS has been made and initial configuration of main services has been done 2025-11-16 14:02:09 -05:00
Alex Tavarez c0a798837d Added a new major task for later 2025-11-16 14:01:14 -05:00
Alex Tavarez 856704f9d7 Added some configuration information for ProFTPd to be used by its configuration file templates ireferred to by its handler 2025-11-16 14:00:43 -05:00
Alex Tavarez f74482c400 Re-added a line specifying a default root for default server and moved MaxInstances line into here due to it being more appropriate context 2025-11-16 13:59:49 -05:00
Alex Tavarez a6218cbaef fix: changed join function sytnax to correct Python method syntax 2025-11-16 13:58:37 -05:00
Alex Tavarez 8c88322621 Renamed file and edited to render it exemplar 2025-11-16 13:57:30 -05:00
Alex Tavarez 960f54efca Added more directives to file to increase security of and friendliness of ProFTPd FTP server 2025-11-16 13:55:15 -05:00
Alex Tavarez a6039e2c13 Added an import of task transfering over SSL/TLS certificates 2025-11-16 13:53:51 -05:00
Alex Tavarez c3eed3e396 Added a task to transfer over and register FQDN certificates from Ansible to remote machine 2025-11-16 13:53:02 -05:00
Alex Tavarez 4fad50c9dc Created a task for creating public FTP directory, created MOTD script transfer tasks 2025-11-16 13:51:47 -05:00
Alex Tavarez ea2346c41b Added importing of ProFTPd handler task to main bootstraps role handler 2025-11-16 13:49:15 -05:00
Alex Tavarez 8b2390a1b7 Added a handler for configuring ProFTPd after it has been installed 2025-11-16 13:47:56 -05:00
Alex Tavarez ee8a391d0e Added list of basenames for SSH MOTD scripts for ease of selection, and added a service to a user 2025-11-16 13:47:06 -05:00
Alex Tavarez 460e3f42ce Added exclusions of files with variable values specific to my use case, rather than being generic 2025-11-16 13:45:27 -05:00
Alex Tavarez e06807ed37 fix: removed line that will be added via task instead 2025-11-12 19:38:35 -05:00
Alex Tavarez 08df87b0bf fix: changed to more appropriate uppercasing of domain name 2025-11-12 19:07:12 -05:00
Alex Tavarez d52f7e02a8 fix: wrong variable name for ServerName directive in template 2025-11-12 19:06:30 -05:00
Alex Tavarez a387326cca feature: created preliminary ProFTPd installation task handler that configures ProFTPd 2025-11-12 18:54:40 -05:00
Alex Tavarez a0413c7ebc fix: changed Ansible user module system attribute value to boolean type 2025-11-12 18:52:43 -05:00
Alex Tavarez b4f6afa628 feature: added a configuration section for ProFTPd to fill in template file variables 2025-11-12 18:51:45 -05:00
Alex Tavarez 4d3d060ec2 feature: added ProFTPd configuration template files to be used by handlers at installation 2025-11-12 18:50:26 -05:00
Alex Tavarez f97a93ee05 feature: added an id attribute for users that must be specified for their account creation 2025-11-12 18:48:25 -05:00
Alex Tavarez bbdcba0b72 feature: added and uncommented more software 2025-11-12 08:33:53 -05:00
Alex Tavarez 4fc691d1db feature: explicitly set PrintMotd SSH option to always be true to allow non-script MOTD capabilities regardless of PAM usage in SSH 2025-11-12 08:33:13 -05:00
Alex Tavarez 8bf893ee1f feature: changed to have PAM allowed by default for SSH for MOTD capabilities 2025-11-12 08:31:47 -05:00
Alex Tavarez 3ed2791d13 feature: renamed and changed contents of file to provide a handler configuring proftpd 2025-11-12 08:30:02 -05:00
Alex Tavarez f139afe429 Added some exclusion rules for sensitive data 2025-11-12 08:28:15 -05:00
Alex Tavarez 0efe13e76b refactor: restructured project for higher-utility naming practices and optimized data structures for variables 2025-11-11 00:58:10 -05:00
Alex Tavarez 44a292f19f Added password prompt and declared ansible_user variable 2025-10-21 16:39:58 -04:00
Alex Tavarez f055178030 Moved SSH user configuration from playbook files to lockdown role files 2025-10-21 16:39:00 -04:00
Alex Tavarez c579cf386b Moved XDG user configuration from playbook files to lockdown role files 2025-10-21 16:38:00 -04:00
Alex Tavarez 3d35228d29 Moved SSH user config example from playbook files to lockdown role file 2025-10-21 16:34:58 -04:00
Alex Tavarez 430db9c1d8 Moved bash aliases and functions from playbook files to lockdown role files 2025-10-21 16:32:46 -04:00
Alex Tavarez 09cdafc570 Added task for taking contents from acquired files, added delegation to a task 2025-10-21 14:07:48 -04:00
Alex Tavarez fd8e4e29b6 Changed task name for imported playbook 2025-10-21 14:06:38 -04:00
Alex Tavarez 8d4ef1a461 Changed source path for files moved into lockdown role that are used in copy module tasks 2025-10-21 14:05:51 -04:00
Alex Tavarez 8647bb2a06 Made match terms more efficient and less redundant 2025-10-21 14:01:55 -04:00
Alex Tavarez fa015cd85c Added an example SSH user configuration file for hosts under the servers group 2025-10-21 11:50:21 -04:00
Alex Tavarez 8a77110c0b Fixed indentation, changed destination path basename for copy module tasks 2025-10-21 11:36:41 -04:00
Alex Tavarez 7884ac47cf Refactored git configuration tasks, converting them to lockdown role tasks, and replaced playbook prompt variables with lockdown role variabls 2025-10-21 11:33:44 -04:00
Alex Tavarez e2c1dcdd2f Added defaults for some git configuration values 2025-10-21 09:28:37 -04:00
Alex Tavarez 66b71ee225 Refactored and moved set of git configuration tasks to lockdown role 2025-10-21 09:20:17 -04:00
Alex Tavarez 97802668da Added git configuration, including acquisition/creation of SSH keys; to be moved/refactored later 2025-09-25 15:06:40 -04:00
Alex Tavarez c551192d2c Changed naming scheme for GPG keys, specified conditional case for GPG key acquisition/creation method 2025-09-25 15:05:09 -04:00
Alex Tavarez 28123cf513 Changed aside due to unexpected rendering 2025-09-07 01:16:44 -04:00
Alex Tavarez 8039e37dc7 Added task for sections to add to README file 2025-09-07 01:14:09 -04:00
Alex Tavarez b4866b9fbb Elaborated further on the nature of the project and added some sections explaining some aspects of current logic 2025-09-07 01:13:45 -04:00
Alex Tavarez c175fea059 Made EOF value for insertafter explicit and fixed path reference in lookup 2025-09-06 13:54:48 -04:00
Alex Tavarez c06b688e87 Rewrote more efficient ignore expressions 2025-09-06 13:53:16 -04:00
Alex Tavarez da121f6cff Added example groups for household machines and personal machines with public exposure 2025-09-06 13:51:39 -04:00
Alex Tavarez d7b22019b5 Added tags to several tasks, and added tasks that allow import of GPG private keys to remote host 2025-09-06 13:50:14 -04:00
Alex Tavarez 6091dfffa1 Added role default variable definitions for gpg key management 2025-09-06 13:49:25 -04:00
Alex Tavarez dd29aa7384 Created gpg-related tasks for lockdown role for post-lockdown initial set-up 2025-09-06 13:47:33 -04:00
Alex Tavarez ef6415d8b2 Changed to reflect new data structure for usernames and passwords 2025-09-05 19:45:26 -04:00
Alex Tavarez 320583635c Added XDG and user SSH configuration tasks contingent on host inventory group 2025-09-05 19:39:03 -04:00
Alex Tavarez 12e04e235e Had renamed file 2025-09-05 19:37:31 -04:00
Alex Tavarez 141c22b647 Fixed filename typo 2025-09-05 19:06:32 -04:00
Alex Tavarez 6ea6e14c82 Made state status and copied file ownership explicit 2025-09-05 18:52:18 -04:00
Alex Tavarez a39d7a78ae Changed example group_vars file to have YAML key reflect example username 'admin' 2025-09-05 18:51:16 -04:00
Alex Tavarez d0409fa0e0 Changed example group_vars file to declare username as 'admin' 2025-09-05 18:50:20 -04:00
Alex Tavarez f0ec354439 Renamed master playbook to specify what hosts or group of hosts the play is meant for 2025-09-05 18:49:07 -04:00
Alex Tavarez 5b1a13c087 Renamed playbook 2025-09-05 18:47:52 -04:00
Alex Tavarez 4706669b9a Added example files for the group_vars of locals inventory group 2025-09-05 18:41:28 -04:00
Alex Tavarez 9d8ce6343c Added example files of XDG user directories for servers group 2025-09-05 18:39:32 -04:00
Alex Tavarez 8283992e9c Added example files for XDG user directory paths 2025-09-05 18:34:36 -04:00
Alex Tavarez 2e7020ee71 Added example files for bash functions and aliases 2025-09-05 18:32:31 -04:00
Alex Tavarez b32daad6a0 Added an example file for Ansible inventory 2025-09-05 18:31:32 -04:00
Alex Tavarez 5d2ee550c4 Added more ignores 2025-09-05 18:30:47 -04:00
Alex Tavarez 8627e4f710 Modified ignore file entries to better capture files to ignore 2025-09-05 15:39:05 -04:00
Alex Tavarez e4bda9facc Added version control ignorance for some playbooks files 2025-09-05 13:27:08 -04:00
Alex Tavarez b35bc45a6d Added hidden tmp folder to version control ignorance 2025-09-05 12:39:54 -04:00
Alex Tavarez a3471012ac Created example file for natively provided private SSH key contents 2025-09-05 12:36:38 -04:00
Alex Tavarez 4ee31f4f1c Created example file with example YAML data structure for host group 2025-09-05 12:35:23 -04:00
Alex Tavarez c29fd64d7e Uncommented task inclusion instead of roles playbook item key, added play name, changed host 2025-09-05 12:34:26 -04:00
Alex Tavarez 966bd6751d Gave playbook a name, added helpful comments, and specified user authentication information under vars playbook item key 2025-09-05 12:32:30 -04:00
Alex Tavarez c42feba85c Changed format of facts cache files to JSON 2025-09-05 12:30:52 -04:00
Alex Tavarez 2b45211ac0 Removed import of task meant to be done via non-root user with privilege escalation 2025-09-05 12:30:01 -04:00
Alex Tavarez 46b3a7ef2e Configured ansible-lint to be parseable 2025-09-05 12:28:42 -04:00
Alex Tavarez d36bdf4197 Changed tag for handler task 2025-09-05 12:26:31 -04:00
Alex Tavarez 4f199e10d0 Added ansible-lint configuration to project root 2025-09-05 12:25:34 -04:00
Alex Tavarez 5e588e89c0 Wrong facts cache path for version control ignorance 2025-09-05 12:23:32 -04:00
Alex Tavarez 8553a09823 Decided to ignore facts cache in version control 2025-09-05 12:21:57 -04:00
Alex Tavarez 0cc9e282be Added version control ignore of SSH keys vars file 2025-09-05 10:52:47 -04:00
Alex Tavarez 8cd242a34c Changed playbook host to reflect hosts file changes 2025-09-05 00:46:48 -04:00
Alex Tavarez 8e83c58eb1 Created some playbooks, a master playbook file, and a vars directory 2025-09-05 00:44:47 -04:00
Alex Tavarez 0cafb4968b Created a role for initial lockdown of recent VPS, and started role for basic server configuration 2025-09-05 00:43:14 -04:00
Alex Tavarez e427da26a6 Added a requirements file for ansible collection dependencies 2025-09-05 00:41:28 -04:00
Alex Tavarez 722eeefd96 Added version control ignore of ansible_galaxy token 2025-09-05 00:40:07 -04:00
Alex Tavarez 875aca5ef0 Added version control ignore of ansible_galaxy cache 2025-09-05 00:39:00 -04:00
Alex Tavarez 07eb8000d8 Added version control ignore of ansible_collections installations 2025-09-05 00:38:02 -04:00
Alex Tavarez 13a913f1f1 Removed Jinja2 variable usage attempts from ansible configuration 2025-09-05 00:24:24 -04:00
Alex Tavarez 2973e0774d Starting rewrite of documentation 2025-09-05 00:23:46 -04:00
Alex Tavarez c97ff53cd7 Adjusted gitignore for new directory structure 2025-09-05 00:23:22 -04:00
Alex Tavarez 7ec74d7f95 Starting from scratch with new playbooks using different directory structure 2025-09-05 00:22:47 -04:00