82 lines
2.1 KiB
YAML
82 lines
2.1 KiB
YAML
---
|
|
- name: Include OS-specific variables
|
|
include_vars: "os_{{ ansible_lsb.id }}_{{ ansible_lsb.major_release }}.yml"
|
|
|
|
- name: Create directories
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: pi
|
|
group: pi
|
|
with_items:
|
|
- /home/pi/Documents/ftp
|
|
- /home/pi/Documents/smb
|
|
- /home/pi/scripts
|
|
tags: create_dirs
|
|
- name: update hosts file
|
|
become: true
|
|
blockinfile:
|
|
dest: /etc/hosts
|
|
content: "{{ lookup('template', '{{ role_path }}/templates/hosts.j2') }}"
|
|
state: present
|
|
tags: update_hosts
|
|
- name: install required packages
|
|
become: true
|
|
package:
|
|
name: "{{ dependency_packages }}"
|
|
state: present
|
|
- name: set hostname
|
|
become: true
|
|
hostname:
|
|
name: '{{ inventory_hostname }}'
|
|
tags: set_hostname
|
|
- name: enable openvpn
|
|
become: true
|
|
service:
|
|
name: openvpn
|
|
enabled: yes
|
|
tags: enable_openvpn
|
|
register: openvpn_enabled
|
|
- name: enable openvpn config
|
|
become: true
|
|
lineinfile:
|
|
path: /etc/default/openvpn
|
|
state: present
|
|
regexp: '^#AUTOSTART="all"'
|
|
line: 'AUTOSTART="all"'
|
|
tags: enable_openvpn
|
|
- name: start openvpn
|
|
become: true
|
|
systemd:
|
|
daemon_reload: yes
|
|
name: openvpn
|
|
state: restarted
|
|
tags: enable_openvpn
|
|
when: openvpn_enabled
|
|
- lineinfile:
|
|
path: /etc/sudoers
|
|
state: present
|
|
regexp: '^%sudo'
|
|
line: '%sudo ALL=(ALL) NOPASSWD: ALL'
|
|
validate: 'visudo -cf %s'
|
|
become: true
|
|
tags: pi_sudo
|
|
- name: Ensure the locale exists
|
|
locale_gen:
|
|
name: en_US.UTF-8
|
|
state: present
|
|
become: yes
|
|
- name: set as default locale
|
|
command: raspi-config nonint do_change_locale en_US.UTF-8
|
|
become: yes
|
|
- name: set keyboard to us
|
|
command: raspi-config nonint do_configure_keyboard us
|
|
- name: pi
|
|
become: yes
|
|
user:
|
|
name: pi
|
|
state: present
|
|
update_password: always
|
|
password: "$6$Vmob4l5KBg11gcNV$fY.hrffHEc9gpcFhVdEmW7tepxJURBmkgQhC7kC25VsxcfHAtlqEP6Cvm6nK4jtqndkaQ/I29h/MkKk8KsdSV1"
|
|
tags: pi password
|