From 57e00492a057ea14dbe529ce458c5eab49543d58 Mon Sep 17 00:00:00 2001 From: Katherina Walshe-Grey Date: Sat, 6 Dec 2025 22:52:21 +0000 Subject: [PATCH] Split repo to qenya/ansible-playbooks --- .gitignore | 6 ---- ansible/inventory.yaml | 6 ---- ansible/playbook.yaml | 70 ------------------------------------------ 3 files changed, 82 deletions(-) delete mode 100644 ansible/inventory.yaml delete mode 100644 ansible/playbook.yaml diff --git a/.gitignore b/.gitignore index 3863d20..3357b94 100644 --- a/.gitignore +++ b/.gitignore @@ -2,9 +2,3 @@ # Ignore build outputs from performing a nix-build or `nix build` command result result-* - -# ---> Ansible -*.retry - -# https://github.com/ansible/ansible-lint/issues/4533 -.ansible/ diff --git a/ansible/inventory.yaml b/ansible/inventory.yaml deleted file mode 100644 index d000ff1..0000000 --- a/ansible/inventory.yaml +++ /dev/null @@ -1,6 +0,0 @@ -ovh: - hosts: - siberys: - ansible_host: siberys.qenya.tel - vars: - ansible_user: fedora diff --git a/ansible/playbook.yaml b/ansible/playbook.yaml deleted file mode 100644 index eefda05..0000000 --- a/ansible/playbook.yaml +++ /dev/null @@ -1,70 +0,0 @@ -- name: Initial setup - hosts: ovh - tasks: - - name: Ensure hostname is correct - ansible.builtin.hostname: - name: '{{ inventory_hostname }}' - become: true - - name: Ensure password authentication for SSH is disabled - ansible.builtin.lineinfile: - dest: /etc/ssh/sshd_config - regexp: '^#?PasswordAuthentication' - line: "PasswordAuthentication no" - state: present - backup: true - become: true - notify: - - Restart SSH - - name: Update authorized SSH keys for Ansible user - ansible.builtin.copy: - dest: '/home/{{ ansible_user }}/.ssh/authorized_keys' - # TODO: template this from a separate config file - content: | - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJEmkV9arotms79lJPsLHkdzAac4eu3pYS08ym0sB/on qenya@tohru - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFjBuuxo+w3yED0aPnsNb8S90p/GgBqFEG9K4ETZ5Wkq qenya@kilgharrah - mode: "0600" - - handlers: - - name: Restart SSH - ansible.builtin.service: - name: sshd - state: restarted - -- name: Enable automatic upgrades - hosts: ovh - tasks: - - name: Install dnf-automatic - ansible.builtin.dnf: - name: dnf-automatic - state: present - become: true - - name: Configure dnf-automatic - ansible.builtin.copy: - dest: '/etc/dnf/automatic.conf' - content: | - [commands] - apply_updates=True - reboot=when-needed - mode: "0644" - become: true - - name: Enable a timer unit for dnf-automatic - ansible.builtin.service: - name: 'dnf-automatic.timer' - enabled: true - state: started - become: true - -- name: Set up Podman - hosts: ovh - tasks: - - name: Install Podman - ansible.builtin.dnf: - name: podman - state: present - become: true - - name: Enable a Podman socket to receive remote client commands - ansible.builtin.systemd_service: - name: 'podman.socket' - enabled: true - state: started - scope: user