No description
Find a file
2025-11-02 15:31:07 +01:00
defaults Fixes #3 provide default values where possible. 2020-06-18 15:17:15 +02:00
files yes 2021-02-08 21:08:56 +01:00
handlers permission fix for postfix 2021-11-21 05:59:34 +01:00
meta update metadata for role 2023-06-10 20:25:29 +02:00
tasks allow multiple ssh keys for admin accounts 2025-11-02 15:31:07 +01:00
templates New/old company name in MOTD 2025-10-25 05:51:26 +02:00
.editorconfig adding editcofngi to all roles 2024-02-09 07:05:05 +01:00
.gitignore Split debian baseline code off to seperate repo 2020-05-23 08:56:12 +02:00
.pre-commit-config.yaml Split debian baseline code off to seperate repo 2020-05-23 08:56:12 +02:00
README.md fixes #5 provide basic README 2020-06-18 15:17:32 +02:00

README for ansible-debian-base

This is a module to quickly setup a somewhat secure setup on Debian and Ubuntu based machines.

Variables

admin_users

data structure containing all the shell users that should be created. Example:

admin_users:
  john:
    uid: 1010
    fullname: John Doe
    ensure: present
    shell: /bin/bash
    ssh_public_key: "ssh-rsa ...."
  mike:
    uid: 1011
    fullname: Jane Doe
    ensure: present
    shell: /bin/bash
    ssh_public_key: "ssh-rsa ...."

linux_root_password_hashed

hashed password to set for the root user. Remains unset / unmanaged by default

linux_updates_mechanism

Resort to the oldskool shell script (legacy) or the native updates manager (current). Defaults to current.

linux_updates_mail_recipient

Mailbox to receive reports about installed updates, defaults to root

linux_updates_automatic_reboot

Wether or not to automaticly reboot a host if any of the updates requires a restart to take effect. Either "true" or "false", defaults to "false" (yes quoted)

linux_updates_reboot_time

When automatic reboots are enabled, at what time the restart is initiated. Defaults to "2:22"

root_ssh_public_key

Public key that allows passwordless root access via SSH. Defaults to none

system_mail_recipient

E-mail recipient that gets all root / system mail.

zabbix_host: "95.217.22.254" zabbix_transport_id: "jdo-mon" zabbix_transport_key: "dfc63cf83516d48150f7b27fe459099e4774e8be7a42d61eabd167274a92a3ac"