ansible-roles/evolinux-base/tasks/main.yml

---

- name: "System compatibility checks"
  assert:
    that:
      - ansible_distribution == "Debian"
      - ansible_distribution_major_version is version('8', '>=')
    msg: only compatible with Debian >= 8

- name: Apt configuration
  include_role:
    name: evolix/apt
  vars:
    apt_install_basics: "{{ evolinux_apt_replace_default_sources }}"
    apt_install_evolix_public: "{{ evolinux_apt_public_sources }}"
    apt_upgrade: "{{ evolinux_apt_upgrade }}"
    apt_basics_components: "{{ ansible_virtualization_role == 'host' | ternary('main contrib non-free', 'main') }}"
  when: evolinux_apt_include | bool

- name: /etc versioning with Git
  include_role:
    name: evolix/etc-git
  when: evolinux_etcgit_include | bool

- name: /etc/evolinux base
  import_tasks: etc-evolinux.yml
  when: evolinux_etcevolinux_include | bool

- name: Hostname
  import_tasks: hostname.yml
  when: evolinux_hostname_include | bool

- name: Kernel tuning
  import_tasks: kernel.yml
  when: evolinux_kernel_include | bool

- name: Fstab configuration
  import_tasks: fstab.yml
  when: evolinux_fstab_include | bool

- name: Packages
  import_tasks: packages.yml
  when: evolinux_packages_include | bool

- name: System settings
  import_tasks: system.yml
  when: evolinux_system_include | bool

- name: Minifirewall
  include_role:
    name: evolix/minifirewall
  when: evolinux_minifirewall_include | bool

- name: Evomaintenance
  include_role:
    name: evolix/evomaintenance
  when: evolinux_evomaintenance_include | bool

- name: SSH configuration
  include: ssh.yml
  when: evolinux_ssh_include | bool

### disabled because of a memory leak
# - name: Create evolinux users
#   include_role:
#     name: evolix/evolinux-users
#   when: evolinux_users_include

- name: Root user configuration
  import_tasks: root.yml
  when: evolinux_root_include | bool

- name: Postfix
  import_tasks: postfix.yml
  when: evolinux_postfix_include | bool

- name: Logs management
  import_tasks: logs.yml
  when: evolinux_logs_include | bool

- name: Default index page
  import_tasks: default_www.yml
  when: evolinux_default_www_include | bool

- name: Hardware drivers and tools
  import_tasks: hardware.yml
  when:
    - evolinux_hardware_include | bool
    - ansible_virtualization_role == "host"

- name: Customize for Online.net
  import_tasks: provider_online.yml
  when: evolinux_provider_online_include | bool

- name: Customize for Orange FCE
  import_tasks: provider_orange_fce.yml
  when: evolinux_provider_orange_fce_include | bool

- name: Override Log2mail service
  import_tasks: log2mail.yml
  when: evolinux_log2mail_include | bool

- import_tasks: motd.yml
  when: evolinux_motd_include | bool

- import_tasks: utils.yml
  when: evolinux_utils_include | bool

- name: Munin
  include_role:
    name: evolix/munin
  when: evolinux_munin_include | bool

- name: Nagios/NRPE
  include_role:
    name: evolix/nagios-nrpe
  when: evolinux_nagios_nrpe_include | bool

- name: fail2ban
  include_role:
    name: evolix/fail2ban
  when: evolinux_fail2ban_include | bool

- name: Evocheck
  include_role:
    name: evolix/evocheck
  when: evolinux_evocheck_include | bool

- name: Listupgrade
  include_role:
    name: evolix/listupgrade
  when: evolinux_listupgrade_include | bool

- name: Generate ldif script
  include_role:
    name: evolix/generate-ldif
  when: evolinux_generateldif_include | bool
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`---`
evolinux-base and admin-users are only compatible Debian >=8, declare once in main.yml and that's all (will be probably generalized to others modules if needed) 2017-08-22 00:42:14 +02:00
evolinux: Name and improve compatibility checks 2018-04-20 14:38:08 +02:00			`- name: "System compatibility checks"`
			`assert:`
			`that:`
			`- ansible_distribution == "Debian"`
Replace version_compare() with version() 2020-02-25 10:45:35 +01:00			`- ansible_distribution_major_version is version('8', '>=')`
evolinux-base and admin-users are only compatible Debian >=8, declare once in main.yml and that's all (will be probably generalized to others modules if needed) 2017-08-22 00:42:14 +02:00			`msg: only compatible with Debian >= 8`

evolinux-base: etc-git is included after apt customization APT sources must be customized before installing any package 2017-10-04 23:32:27 +02:00			`- name: Apt configuration`
evolinux-base: use apt role for all APT configuration 2017-10-10 16:35:23 +02:00			`include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`name: evolix/apt`
evolinux-base: use apt role for all APT configuration 2017-10-10 16:35:23 +02:00			`vars:`
			`apt_install_basics: "{{ evolinux_apt_replace_default_sources }}"`
			`apt_install_evolix_public: "{{ evolinux_apt_public_sources }}"`
apt: upgrade packages after all the configuration is done 2022-01-25 18:25:47 +01:00			`apt_upgrade: "{{ evolinux_apt_upgrade }}"`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`apt_basics_components: "{{ ansible_virtualization_role == 'host' \| ternary('main contrib non-free', 'main') }}"`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_apt_include \| bool`
evolinux-base: etc-git is included after apt customization APT sources must be customized before installing any package 2017-10-04 23:32:27 +02:00
			`- name: /etc versioning with Git`
			`include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`name: evolix/etc-git`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_etcgit_include \| bool`
evolinux-base: etc-git is included after apt customization APT sources must be customized before installing any package 2017-10-04 23:32:27 +02:00
evolinux-base: create /etc/evolinux 2018-01-02 19:38:46 +01:00			`- name: /etc/evolinux base`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: etc-evolinux.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_etcevolinux_include \| bool`
evolinux-base: create /etc/evolinux 2018-01-02 19:38:46 +01:00
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`- name: Hostname`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: hostname.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_hostname_include \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
			`- name: Kernel tuning`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: kernel.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_kernel_include \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
			`- name: Fstab configuration`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: fstab.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_fstab_include \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
Evolinux-base: group packages 2016-12-21 14:55:20 +01:00			`- name: Packages`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: packages.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_packages_include \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
			`- name: System settings`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: system.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_system_include \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
evolinux-base: Exec the firewall tasks sooner to avoid dependency issues 2018-03-15 12:04:24 +01:00			`- name: Minifirewall`
			`include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`name: evolix/minifirewall`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_minifirewall_include \| bool`
evolinux-base: Exec the firewall tasks sooner to avoid dependency issues 2018-03-15 12:04:24 +01:00
Refactoring of admin-users + evolinux-base roles * rename admin-users to evolinux-users * splitting the "sudo" part for users between jessie and stretch * with stretch, the sudo group is customizable and properly configured * import evolinux-users role from evolinux-base at proper time to ensure ssh connections are possible for other users before cutting root's access * evomaintenance is also included in evolinux-base to have it available when users are created 2017-10-05 23:55:34 +02:00			`- name: Evomaintenance`
			`include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`name: evolix/evomaintenance`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_evomaintenance_include \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
evolinux-base: add ssh.yml * disable root login * list authorized addresses * disable AcceptEnv 2016-12-27 14:03:35 +01:00			`- name: SSH configuration`
			`include: ssh.yml`
fix more Ansible syntax 2021-05-09 23:20:15 +02:00			`when: evolinux_ssh_include \| bool`
remove trailing whitespaces 2021-05-13 15:23:05 +02:00
evolinux-base: don't disable root ssh by default 2017-10-10 21:58:03 +02:00			`### disabled because of a memory leak`
evolinux-users must not be included as is There is a major problem with memory consumption, probably a leak, when the role is included. If it is played in the playbook, the whole run takes ~200 MB. If it is played as an included role, the run takes 2.4GB. 2017-10-10 20:52:49 +02:00			`# - name: Create evolinux users`
			`# include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`# name: evolix/evolinux-users`
evolinux-users must not be included as is There is a major problem with memory consumption, probably a leak, when the role is included. If it is played in the playbook, the whole run takes ~200 MB. If it is played as an included role, the run takes 2.4GB. 2017-10-10 20:52:49 +02:00			`# when: evolinux_users_include`
Refactoring of admin-users + evolinux-base roles * rename admin-users to evolinux-users * splitting the "sudo" part for users between jessie and stretch * with stretch, the sudo group is customizable and properly configured * import evolinux-users role from evolinux-base at proper time to ensure ssh connections are possible for other users before cutting root's access * evomaintenance is also included in evolinux-base to have it available when users are created 2017-10-05 23:55:34 +02:00
			`- name: Root user configuration`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: root.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_root_include \| bool`
Refactoring of admin-users + evolinux-base roles * rename admin-users to evolinux-users * splitting the "sudo" part for users between jessie and stretch * with stretch, the sudo group is customizable and properly configured * import evolinux-users role from evolinux-base at proper time to ensure ssh connections are possible for other users before cutting root's access * evomaintenance is also included in evolinux-base to have it available when users are created 2017-10-05 23:55:34 +02:00
Evolinux-base: group packages 2016-12-21 14:55:20 +01:00			`- name: Postfix`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: postfix.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_postfix_include \| bool`
Evolinux-base: group packages 2016-12-21 14:55:20 +01:00
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`- name: Logs management`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: logs.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_logs_include \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
			`- name: Default index page`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: default_www.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_default_www_include \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
			`- name: Hardware drivers and tools`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: hardware.yml`
			`when:`
			`- evolinux_hardware_include \| bool`
			`- ansible_virtualization_role == "host"`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
			`- name: Customize for Online.net`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: provider_online.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_provider_online_include \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
			`- name: Customize for Orange FCE`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: provider_orange_fce.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_provider_orange_fce_include \| bool`
evolinux-base: override logmail service 2017-07-19 16:03:36 +02:00
typo 2019-10-30 13:48:09 +01:00			`- name: Override Log2mail service`
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`import_tasks: log2mail.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_log2mail_include \| bool`
evolinux-base includes a few external roles * minifirewall * munin * nagios-nrpe * fail2ban * listupgrade 2017-10-07 18:13:52 +02:00
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`- import_tasks: motd.yml`
evolinux-base: Donner le choix de changer (ou non) le motd 2021-12-10 11:37:33 +01:00			`when: evolinux_motd_include \| bool`
evolinux-base: deploy custom motd if template are present 2018-11-30 15:14:39 +01:00
evolinux-base: syntax 2023-03-18 18:35:54 +01:00			`- import_tasks: utils.yml`
evolinux-base: utils.yml can be excluded 2022-10-11 13:37:21 +02:00			`when: evolinux_utils_include \| bool`
evolinux-base: deploy custom motd if template are present 2018-11-30 15:14:39 +01:00
evolinux-base includes a few external roles * minifirewall * munin * nagios-nrpe * fail2ban * listupgrade 2017-10-07 18:13:52 +02:00			`- name: Munin`
			`include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`name: evolix/munin`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_munin_include \| bool`
evolinux-base includes a few external roles * minifirewall * munin * nagios-nrpe * fail2ban * listupgrade 2017-10-07 18:13:52 +02:00
			`- name: Nagios/NRPE`
			`include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`name: evolix/nagios-nrpe`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_nagios_nrpe_include \| bool`
evolinux-base includes a few external roles * minifirewall * munin * nagios-nrpe * fail2ban * listupgrade 2017-10-07 18:13:52 +02:00
			`- name: fail2ban`
			`include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`name: evolix/fail2ban`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_fail2ban_include \| bool`
evolinux-base includes a few external roles * minifirewall * munin * nagios-nrpe * fail2ban * listupgrade 2017-10-07 18:13:52 +02:00
evolinux-base: install Evocheck (default: `True`) 2020-03-09 17:01:38 +01:00			`- name: Evocheck`
			`include_role:`
			`name: evolix/evocheck`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_evocheck_include \| bool`
evolinux-base: install Evocheck (default: `True`) 2020-03-09 17:01:38 +01:00
evolinux-base includes a few external roles * minifirewall * munin * nagios-nrpe * fail2ban * listupgrade 2017-10-07 18:13:52 +02:00			`- name: Listupgrade`
			`include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`name: evolix/listupgrade`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_listupgrade_include \| bool`
Include generate-ldif in evolinux-base 2017-10-11 12:10:59 +02:00
			`- name: Generate ldif script`
			`include_role:`
Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00			`name: evolix/generate-ldif`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: evolinux_generateldif_include \| bool`