evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 19 Releases 33 Wiki Activity
ansible-roles/evolinux-base
History
Jérémy Lecour b01d9178d0 evolinux-users: split AllowGroups/AllowUsers modes 
If an AllowGroups directive is found or when using Debian 9+,
we use the AllowGroups directive and comment AllowUsers that may be
already present.
When adding a user, we make sure that the allowed group exists
and the use is in that group, to be sure that at least this user
is allowed to connect.

In other situations, we use the AllowUsers directive.
2018-04-18 12:16:04 +02:00
..
defaults evolinux-base: fail2ban is not enabled by default 2018-04-18 12:15:43 +02:00
files evolnux-base: cache pgp key locally 2017-11-15 11:40:42 +01:00
handlers use role ntpd in evolinux-base 2017-08-31 03:31:00 +02:00
meta evolinux-base/meta: compatible with stretch 2017-10-04 23:31:29 +02:00
tasks evolinux-users: split AllowGroups/AllowUsers modes 2018-04-18 12:16:04 +02:00
templates apache/nginx: server status suffix 2018-01-03 10:05:20 +01:00
tests disable some parts of evolinux-base in tests 2017-04-24 09:46:43 +02:00
vars evolinux: finer grained kernel configuration 2017-03-30 15:33:23 +02:00
.z_kitchen.yml evolinux-base: improve the kitchen recipe 2017-04-20 15:51:48 +02:00
README.md evolinux-base: allow ssh for current user 2017-10-07 13:12:03 +02:00

README.md

evolinux-base

Various tasks for Evolinux setup.

Tasks

  • hostname :
  • kernel :
  • apt :
  • fstab :
  • packages :
  • system :
  • root :
  • ssh :
  • postfix :
  • logs :
  • default_www :
  • hardware :
  • provider_online :
  • provider_orange_fce :

Available variables

Each tasks group is included in the main.yml file with a condition based on a variable like evolinux_hostname_include (mostly True by default). The variables can be set to False to disable a task group. Finer grained tasks disabling is done in each group of tasks.

Main variables are:

  • general_alert_email: email address to send various alert messages (default: root@localhost).
  • apt_alert_email: email address to send APT messages to (default: general_alert_email).
  • log2mail_alert_email: email address to send Log2mail messages to (default: general_alert_email).
  • postfix_alias_email: email address for messages sent to root (default: general_alert_email) ;
  • evolinux_apt_upgrade: upgrade packages (default: True)
  • evolinux_apt_hooks: install APT hooks (default: True)
  • evolinux_apt_remove_aptitude: uninstall aptitude (default: True)
  • evolinux_delete_nfs: delete NFS tools (default: True)
  • evolinux_additional_packages: optional additional packages to install (default: [])
  • evolinux_postfix_purge_exim: purge Exim packages (default: True) ;
  • evolinux_ssh_password_auth_addresses: list of addresses that can authenticate with a password (default: [])
  • evolinux_ssh_disable_root: disable SSH access for root (default: False)
  • evolinux_ssh_allow_current_user: don't lock yourself out (default: False)

The full list of variables (with default values) can be found in defaults/main.yml.