From 3e7faa9fdc210e9279816cebb9c5d40432b9ba61 Mon Sep 17 00:00:00 2001 From: Jesko Date: Wed, 8 May 2024 17:11:42 +0200 Subject: [PATCH] alles ausgelagert --- playbook.yml | 95 ++++------------------------ roles/installpackages/tasks/main.yml | 5 ++ roles/nousb/tasks/main.yml | 5 ++ roles/purgepackages/tasks/main.yml | 55 ++++++++++++++++ roles/ufw/tasks/main.yml | 8 +++ 5 files changed, 84 insertions(+), 84 deletions(-) create mode 100644 roles/installpackages/tasks/main.yml create mode 100644 roles/nousb/tasks/main.yml create mode 100644 roles/purgepackages/tasks/main.yml diff --git a/playbook.yml b/playbook.yml index 63ee649..745fca0 100644 --- a/playbook.yml +++ b/playbook.yml @@ -8,93 +8,20 @@ environment: PATH: "/sbin:{{ ansible_env.PATH }}" - -# to verify ufw configuration run: -# sudo ufw status verbose - roles: - - role: pruefungsuser - - role: libreoffice - - role: ufw - tasks: - - - name: disable mounting of usb flash drives - file: - path: /media - owner: root - mode: '700' - - - - - name: Set timezone to Europe/Vienna + - name: Set timezone to Europe/Berlin timezone: - name: Europe/Vienna + name: Europe/Berlin + + roles: + - role: pruefungsuser # anlegen des Users (config in vars) + - role: libreoffice # libreoffice installieren und verlinken + - role: ufw # firewall konfigurieren + - role: nousb # usb deaktivieren + - role: purgepackages # deinstallieren von Paketen + - role: installpackages # installieren von Paketen + - - name: purge some prior installed packages - apt: - name: - - task-kde-desktop - - task-german-kde-desktop - - task-german-desktop - - xdg-desktop-portal-kde - - xdg-desktop-portal-wlr - - akonadi-backend-sqlite - - thunderbird-l10n-de - - webext-privacy-badger - - webext-ublock-origin-firefox - - webext-ublock-origin-chromium - - vlc - - gimp - - inkscape - - flameshot - - bluefish - - nmap - - net-tools - - ghex - - thonny - - spyder - - mu-editor - - dia - - vym - - tree - - sqlite3 - - kicad - - kicad-doc-de - - akonadi-backend-mysql - - akonadi-contacts-data - - akonadi-mime-data - - akonadi-server - - akregator - - aspell - - aspell-de - - dolphin - - firebird3.0-common - - gimp-data - - gwenview - - hyphen-en-us - - ingerman - - ispell - - kate - - kcalc - - kmail - - knotes - - korganizer - - wamerican - - dragonplayer - - juk - autoremove: yes - state: absent - - name: intall some prior installed packages - apt: - name: - - curl - state: latest - - name: Enable ufw - ufw: state=enabled - - name: start ufw service - service: - name: ufw - state: restarted diff --git a/roles/installpackages/tasks/main.yml b/roles/installpackages/tasks/main.yml new file mode 100644 index 0000000..aa8add0 --- /dev/null +++ b/roles/installpackages/tasks/main.yml @@ -0,0 +1,5 @@ +- name: intall some prior installed packages + apt: + name: + - curl + state: latest \ No newline at end of file diff --git a/roles/nousb/tasks/main.yml b/roles/nousb/tasks/main.yml new file mode 100644 index 0000000..9029b42 --- /dev/null +++ b/roles/nousb/tasks/main.yml @@ -0,0 +1,5 @@ +- name: disable mounting of usb flash drives + file: + path: /media + owner: root + mode: '700' \ No newline at end of file diff --git a/roles/purgepackages/tasks/main.yml b/roles/purgepackages/tasks/main.yml new file mode 100644 index 0000000..eff65f5 --- /dev/null +++ b/roles/purgepackages/tasks/main.yml @@ -0,0 +1,55 @@ +- name: purge some prior installed packages + apt: + name: + - task-kde-desktop + - task-german-kde-desktop + - task-german-desktop + - xdg-desktop-portal-kde + - xdg-desktop-portal-wlr + - akonadi-backend-sqlite + - thunderbird-l10n-de + - webext-privacy-badger + - webext-ublock-origin-firefox + - webext-ublock-origin-chromium + - vlc + - gimp + - inkscape + - flameshot + - bluefish + - nmap + - net-tools + - ghex + - thonny + - spyder + - mu-editor + - dia + - vym + - tree + - sqlite3 + - kicad + - kicad-doc-de + - akonadi-backend-mysql + - akonadi-contacts-data + - akonadi-mime-data + - akonadi-server + - akregator + - aspell + - aspell-de + - dolphin + - firebird3.0-common + - gimp-data + - gwenview + - hyphen-en-us + - ingerman + - ispell + - kate + - kcalc + - kmail + - knotes + - korganizer + - wamerican + - dragonplayer + - juk + - cervisia + autoremove: yes + state: absent \ No newline at end of file diff --git a/roles/ufw/tasks/main.yml b/roles/ufw/tasks/main.yml index 4d566d9..ccd5729 100644 --- a/roles/ufw/tasks/main.yml +++ b/roles/ufw/tasks/main.yml @@ -56,3 +56,11 @@ - { port: '443', direction: 'out', destination: '162.55.5.40/32' } +- name: Enable ufw + ufw: + state: enabled + +- name: start ufw service + service: + name: ufw + state: restarted \ No newline at end of file