diff options
Diffstat (limited to 'hetzner')
-rw-r--r-- | hetzner/init.yaml | 53 | ||||
-rw-r--r-- | hetzner/inventory/hosts.yaml | 1 | ||||
-rw-r--r-- | hetzner/mastodon.yml | 31 | ||||
-rw-r--r-- | hetzner/nginx.yaml | 25 | ||||
-rw-r--r-- | hetzner/requirements.yaml | 6 | ||||
-rw-r--r-- | hetzner/user.yaml | 59 |
6 files changed, 175 insertions, 0 deletions
diff --git a/hetzner/init.yaml b/hetzner/init.yaml new file mode 100644 index 0000000..a4a3db1 --- /dev/null +++ b/hetzner/init.yaml | |||
@@ -0,0 +1,53 @@ | |||
1 | --- | ||
2 | - name: System initialization | ||
3 | hosts: localhost | ||
4 | become: true | ||
5 | tasks: | ||
6 | - name: Make sure we have a 'wheel' group | ||
7 | group: | ||
8 | name: wheel | ||
9 | state: present | ||
10 | |||
11 | - name: Allow 'wheel' group to have passwordless sudo | ||
12 | lineinfile: | ||
13 | dest: /etc/sudoers | ||
14 | state: present | ||
15 | regexp: '^%wheel' | ||
16 | line: '%wheel ALL=(ALL) NOPASSWD: ALL' | ||
17 | validate: visudo -cf %s | ||
18 | |||
19 | - name: Add sudoers users to wheel group | ||
20 | user: | ||
21 | name: clarkzjw | ||
22 | groups: wheel | ||
23 | append: yes | ||
24 | shell: /bin/bash | ||
25 | |||
26 | - name: Set authorized keys taken from url | ||
27 | authorized_key: | ||
28 | user: clarkzjw | ||
29 | state: present | ||
30 | key: https://github.com/clarkzjw.keys | ||
31 | |||
32 | - name: Disable Root Login | ||
33 | lineinfile: | ||
34 | dest: /etc/ssh/sshd_config | ||
35 | regexp: '^PermitRootLogin' | ||
36 | line: "PermitRootLogin no" | ||
37 | state: present | ||
38 | backup: yes | ||
39 | |||
40 | - name: Disable Password Login | ||
41 | lineinfile: | ||
42 | dest: /etc/ssh/sshd_config | ||
43 | regexp: '^PasswordAuthentication' | ||
44 | line: "PasswordAuthentication no" | ||
45 | state: present | ||
46 | backup: yes | ||
47 | |||
48 | - name: Restart SSHD | ||
49 | systemd: | ||
50 | name: ssh | ||
51 | enabled: true | ||
52 | state: restarted | ||
53 | daemon_reload: true | ||
diff --git a/hetzner/inventory/hosts.yaml b/hetzner/inventory/hosts.yaml new file mode 100644 index 0000000..2302eda --- /dev/null +++ b/hetzner/inventory/hosts.yaml | |||
@@ -0,0 +1 @@ | |||
localhost ansible_connection=local | |||
diff --git a/hetzner/mastodon.yml b/hetzner/mastodon.yml new file mode 100644 index 0000000..354390c --- /dev/null +++ b/hetzner/mastodon.yml | |||
@@ -0,0 +1,31 @@ | |||
1 | --- | ||
2 | - name: Install Mastodon dependencies | ||
3 | hosts: localhost | ||
4 | tasks: | ||
5 | - name: Install required packages | ||
6 | apt: | ||
7 | name: | ||
8 | - imagemagick | ||
9 | - ffmpeg | ||
10 | - libpq-dev | ||
11 | - libxml2-dev | ||
12 | - libxslt1-dev | ||
13 | - file | ||
14 | - libprotobuf-dev | ||
15 | - protobuf-compiler | ||
16 | - pkg-config | ||
17 | - autoconf | ||
18 | - bison | ||
19 | - libssl-dev | ||
20 | - libyaml-dev | ||
21 | - libreadline6-dev | ||
22 | - zlib1g-dev | ||
23 | - libncurses5-dev | ||
24 | - libffi-dev | ||
25 | - libgdbm-dev | ||
26 | - redis-server | ||
27 | - redis-tools | ||
28 | - libidn11-dev | ||
29 | - libicu-dev | ||
30 | - libjemalloc-dev | ||
31 | update_cache: true | ||
diff --git a/hetzner/nginx.yaml b/hetzner/nginx.yaml new file mode 100644 index 0000000..006d4e3 --- /dev/null +++ b/hetzner/nginx.yaml | |||
@@ -0,0 +1,25 @@ | |||
1 | --- | ||
2 | - name: Install Nginx | ||
3 | hosts: localhost | ||
4 | tasks: | ||
5 | - name: Install NGINX | ||
6 | ansible.builtin.include_role: | ||
7 | name: nginxinc.nginx | ||
8 | vars: | ||
9 | nginx_modules: | ||
10 | - geoip | ||
11 | - perl | ||
12 | nginx_service_modify: true | ||
13 | nginx_service_timeout: 95 | ||
14 | nginx_logrotate_conf_enable: true | ||
15 | nginx_logrotate_conf: | ||
16 | paths: | ||
17 | - /var/log/nginx/*.log | ||
18 | options: | ||
19 | - daily | ||
20 | - missingok | ||
21 | - rotate 14 | ||
22 | - compress | ||
23 | - delaycompress | ||
24 | - notifempty | ||
25 | - sharedscripts | ||
diff --git a/hetzner/requirements.yaml b/hetzner/requirements.yaml new file mode 100644 index 0000000..9a039b1 --- /dev/null +++ b/hetzner/requirements.yaml | |||
@@ -0,0 +1,6 @@ | |||
1 | - name: gantsign.oh-my-zsh | ||
2 | type: galaxy | ||
3 | version: 2.6.0 | ||
4 | - name: nginxinc.nginx | ||
5 | type: galaxy | ||
6 | version: 0.24.0 | ||
diff --git a/hetzner/user.yaml b/hetzner/user.yaml new file mode 100644 index 0000000..bf21687 --- /dev/null +++ b/hetzner/user.yaml | |||
@@ -0,0 +1,59 @@ | |||
1 | --- | ||
2 | - name: System initialization | ||
3 | hosts: localhost | ||
4 | become: true | ||
5 | roles: | ||
6 | - role: gantsign.oh-my-zsh | ||
7 | users: | ||
8 | - username: clarkzjw | ||
9 | oh_my_zsh: | ||
10 | theme: robbyrussell | ||
11 | plugins: | ||
12 | - git | ||
13 | update_mode: reminder | ||
14 | update_frequency: 28 | ||
15 | tasks: | ||
16 | - name: Install required packages | ||
17 | apt: | ||
18 | name: | ||
19 | - debian-archive-keyring | ||
20 | - apt-transport-https | ||
21 | - build-essential | ||
22 | - ca-certificates | ||
23 | - lsb-release | ||
24 | - cifs-utils | ||
25 | - vnstat | ||
26 | - python3-dev | ||
27 | - python3-pip | ||
28 | - python3 | ||
29 | - iperf3 | ||
30 | - gnupg2 | ||
31 | - unzip | ||
32 | - rsync | ||
33 | - wget | ||
34 | - sudo | ||
35 | - htop | ||
36 | - curl | ||
37 | - tree | ||
38 | - zip | ||
39 | - vim | ||
40 | - zsh | ||
41 | - git | ||
42 | update_cache: true | ||
43 | |||
44 | - name: Postgresql | ||
45 | apt: | ||
46 | name: | ||
47 | - postgresql | ||
48 | - postgresql-client | ||
49 | - postgresql-contrib | ||
50 | update_cache: true | ||
51 | |||
52 | - name: Clean unneeded packages | ||
53 | apt: | ||
54 | autoremove: true | ||
55 | purge: true | ||
56 | |||
57 | - name: Clean unneeded packages | ||
58 | apt: | ||
59 | autoclean: true | ||