alles ausgelagert

playbook.yml

@@ -8,93 +8,20 @@
   environment:
     PATH: "/sbin:{{ ansible_env.PATH }}"
 
-
-# to verify ufw configuration run:
-# sudo ufw status verbose
-  roles:
-    - role: pruefungsuser
-    - role: libreoffice
-    - role: ufw
-
   tasks:
-
-    - name: disable mounting of usb flash drives
-      file:
-        path: /media
-        owner: root
-        mode: '700' 
-
- 
-
-    - name: Set timezone to Europe/Vienna
+    - name: Set timezone to Europe/Berlin
       timezone:
-        name: Europe/Vienna
+        name: Europe/Berlin
+
+  roles:
+    - role: pruefungsuser     # anlegen des Users (config in vars)
+    - role: libreoffice       # libreoffice installieren und verlinken
+    - role: ufw               # firewall konfigurieren
+    - role: nousb             # usb deaktivieren
+    - role: purgepackages     # deinstallieren von Paketen
+    - role: installpackages     # installieren von Paketen
+
 
 
-    - name: purge some prior installed packages
-      apt: 
-        name: 
-          - task-kde-desktop
-          - task-german-kde-desktop
-          - task-german-desktop
-          - xdg-desktop-portal-kde
-          - xdg-desktop-portal-wlr
-          - akonadi-backend-sqlite
-          - thunderbird-l10n-de
-          - webext-privacy-badger
-          - webext-ublock-origin-firefox
-          - webext-ublock-origin-chromium
-          - vlc
-          - gimp
-          - inkscape
-          - flameshot
-          - bluefish
-          - nmap
-          - net-tools
-          - ghex
-          - thonny
-          - spyder
-          - mu-editor
-          - dia
-          - vym
-          - tree
-          - sqlite3
-          - kicad
-          - kicad-doc-de
-          - akonadi-backend-mysql
-          - akonadi-contacts-data
-          - akonadi-mime-data
-          - akonadi-server
-          - akregator
-          - aspell
-          - aspell-de
-          - dolphin
-          - firebird3.0-common
-          - gimp-data
-          - gwenview
-          - hyphen-en-us
-          - ingerman
-          - ispell
-          - kate
-          - kcalc
-          - kmail
-          - knotes
-          - korganizer
-          - wamerican
-          - dragonplayer
-          - juk
-        autoremove: yes
-        state: absent
-    - name: intall some prior installed packages
-      apt: 
-        name: 
-          - curl
-        state: latest
 
-    - name: Enable ufw
-      ufw: state=enabled
 
-    - name: start ufw service
-      service: 
-        name: ufw
-        state: restarted

roles/installpackages/tasks/main.yml

@@ -0,0 +1,5 @@
+- name: intall some prior installed packages
+  apt: 
+    name: 
+      - curl
+    state: latest

roles/nousb/tasks/main.yml

@@ -0,0 +1,5 @@
+- name: disable mounting of usb flash drives
+  file:
+    path: /media
+    owner: root
+    mode: '700'

roles/purgepackages/tasks/main.yml

@@ -0,0 +1,55 @@
+- name: purge some prior installed packages
+  apt: 
+    name: 
+      - task-kde-desktop
+      - task-german-kde-desktop
+      - task-german-desktop
+      - xdg-desktop-portal-kde
+      - xdg-desktop-portal-wlr
+      - akonadi-backend-sqlite
+      - thunderbird-l10n-de
+      - webext-privacy-badger
+      - webext-ublock-origin-firefox
+      - webext-ublock-origin-chromium
+      - vlc
+      - gimp
+      - inkscape
+      - flameshot
+      - bluefish
+      - nmap
+      - net-tools
+      - ghex
+      - thonny
+      - spyder
+      - mu-editor
+      - dia
+      - vym
+      - tree
+      - sqlite3
+      - kicad
+      - kicad-doc-de
+      - akonadi-backend-mysql
+      - akonadi-contacts-data
+      - akonadi-mime-data
+      - akonadi-server
+      - akregator
+      - aspell
+      - aspell-de
+      - dolphin
+      - firebird3.0-common
+      - gimp-data
+      - gwenview
+      - hyphen-en-us
+      - ingerman
+      - ispell
+      - kate
+      - kcalc
+      - kmail
+      - knotes
+      - korganizer
+      - wamerican
+      - dragonplayer
+      - juk
+      - cervisia
+    autoremove: yes
+    state: absent

roles/ufw/tasks/main.yml

@@ -56,3 +56,11 @@
     - { port: '443', direction: 'out', destination: '162.55.5.40/32' }
 
 
+- name: Enable ufw
+  ufw: 
+    state: enabled
+
+- name: start ufw service
+  service: 
+    name: ufw
+    state: restarted