diff options
author | clarkzjw <[email protected]> | 2023-01-13 15:43:30 -0800 |
---|---|---|
committer | clarkzjw <[email protected]> | 2023-01-13 15:43:30 -0800 |
commit | 61b24b7f9da768902886747ea70e5b91695edad0 (patch) | |
tree | 62b8ab388bd516077c39d3cf7e0095552ff8c906 /clarkzjw.ca/config/atlas/roles/init | |
parent | 966596fd3f0e9b60aad55a05c5defa33b9f7e03f (diff) | |
download | homelab-61b24b7f9da768902886747ea70e5b91695edad0.tar.gz |
fix init
Diffstat (limited to 'clarkzjw.ca/config/atlas/roles/init')
-rw-r--r-- | clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml b/clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml index cc69403..29cf529 100644 --- a/clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml +++ b/clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml | |||
@@ -22,3 +22,35 @@ | |||
22 | user: clarkzjw | 22 | user: clarkzjw |
23 | state: present | 23 | state: present |
24 | key: https://github.com/clarkzjw.keys | 24 | key: https://github.com/clarkzjw.keys |
25 | |||
26 | - name: Add Tailscale GPG apt Key | ||
27 | apt_key: | ||
28 | url: https://pkgs.tailscale.com/stable/debian/bullseye.noarmor.gpg | ||
29 | keyring: /usr/share/keyrings/tailscale-archive-keyring.gpg | ||
30 | state: present | ||
31 | |||
32 | - name: Add Tailscale Repository | ||
33 | get_url: | ||
34 | url: https://pkgs.tailscale.com/stable/debian/bullseye.tailscale-keyring.list | ||
35 | dest: /etc/apt/sources.list.d/tailscale.list | ||
36 | |||
37 | - name: Install Tailscale | ||
38 | apt: | ||
39 | name: | ||
40 | - tailscale | ||
41 | update_cache: true | ||
42 | |||
43 | - name: Disable Root Login | ||
44 | lineinfile: | ||
45 | dest: /etc/ssh/sshd_config | ||
46 | regexp: '^PermitRootLogin yes' | ||
47 | line: "PermitRootLogin no" | ||
48 | state: present | ||
49 | backup: yes | ||
50 | |||
51 | - name: Restart SSHD | ||
52 | systemd: | ||
53 | name: ssh | ||
54 | enabled: true | ||
55 | state: restarted | ||
56 | daemon_reload: true | ||