https://github.com/cesnet/ansible-role-basic-machine
Asnible role for basic common setup of machines
https://github.com/cesnet/ansible-role-basic-machine
Last synced: 1 day ago
JSON representation
Asnible role for basic common setup of machines
- Host: GitHub
- URL: https://github.com/cesnet/ansible-role-basic-machine
- Owner: CESNET
- License: apache-2.0
- Created: 2024-05-28T16:54:50.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2024-05-28T18:12:49.000Z (over 1 year ago)
- Last Synced: 2026-01-12T23:32:11.539Z (23 days ago)
- Size: 6.84 KB
- Stars: 0
- Watchers: 8
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ansible-role-basic-machine
Ansible role for basic common setup of machines.
It just imports the following roles:
- [cesnet.work_env](https://github.com/CESNET/ansible-role-work-env/)
- [cesnet.ntp](https://github.com/CESNET/ansible-role-ntp/)
- [cesnet.metacentrum_monitoring](https://github.com/CESNET/ansible-role-metacentrum-monitoring/)
- [cesnet.unattended-upgrades](https://github.com/CESNET/ansible-role-unattended-upgrades/)
- [cesnet.yubikeys](https://github.com/CESNET/ansible-role-yubikeys/)
- [cesnet.firewall](https://github.com/CESNET/ansible-role-firewall/)
Role Variables
--------------
The role has no own variables. However, the included roles do have variables. They have sensible defaults,
but the default firewall rules allow only ssh protocol and the default list of users is empty,
so you likely want to change those.
At least the variable **root_email_address** must be defined to contain the email address to which reports
from unattended upgrades will be sent.
Example playbook:
----------------
```yaml
- name: "run role cesnet.basic_machine on a machine"
hosts: all
remote_user: root
roles:
- role: cesnet.basic_machine
vars:
root_email_address: makub@ics.muni.cz
unattended_upgrades_automatic_reboot: true
firewall_open_tcp_ports:
- { port: 80, comment: "accept http from everywhere" }
- { port: 443, comment: "accept https from everywhere" }
yubikey_users: "{{ perun_yubikey_users }}"
yubikey_lognames: [ 'makub', 'zlamalp' ]
```