33 lines
849 B
YAML
33 lines
849 B
YAML
---
|
|
# Common role - main tasks
|
|
|
|
- name: Include OS-specific variables
|
|
ansible.builtin.include_vars: "{{ item }}"
|
|
with_first_found:
|
|
- "{{ ansible_distribution | lower }}-{{ ansible_distribution_major_version }}.yml"
|
|
- "{{ ansible_distribution | lower }}.yml"
|
|
- "{{ ansible_os_family | lower }}.yml"
|
|
- "default.yml"
|
|
ignore_errors: true
|
|
|
|
- name: Run package tasks
|
|
ansible.builtin.include_tasks: packages.yml
|
|
tags: [packages]
|
|
|
|
- name: Run timezone tasks
|
|
ansible.builtin.include_tasks: timezone.yml
|
|
tags: [timezone]
|
|
|
|
- name: Run user tasks
|
|
ansible.builtin.include_tasks: users.yml
|
|
tags: [users]
|
|
when: common_users | length > 0
|
|
|
|
- name: Run SSH hardening tasks
|
|
ansible.builtin.include_tasks: ssh.yml
|
|
tags: [ssh, security]
|
|
|
|
- name: Run security tasks
|
|
ansible.builtin.include_tasks: security.yml
|
|
tags: [security]
|