Merge branch 'system'

tasks/files/sshd_config

@@ -4,7 +4,7 @@
 #       This file is managed by Ansible         #
 #       Manual edition will be overridden       #
 #                                               #
-#   https://lab.frogg.it/fcode/ansible/debian   #
+#  https://lab.frogg.it/freezed/ansible-debian  #
 #                                               #
 # ############################################# #
 

tasks/system_cfg/firewall.yml

@@ -23,6 +23,26 @@
     direction: outgoing
     policy: allow
 
+- name: UFW | allow local IPs on port 22 IN
+  when: inventory_hostname in groups.station
+  loop: "{{ groups['station'] }}"
+  community.general.ufw:
+    direction: in
+    port: '22'
+    proto: tcp
+    rule: allow
+    src: "{{hostvars[item]['ansible_host']}}"
+
+- name: "UFW | allow {{gateway}} IP on port 22 IN"
+  when: (inventory_hostname in groups.production) or
+        (inventory_hostname in groups.devel)
+  community.general.ufw:
+    direction: in
+    port: '22'
+    proto: tcp
+    rule: allow
+    src: "{{gateway}}"
+
 - name: UFW | limit tcp port 22 IN
   community.general.ufw:
     direction: in

tasks/system_cfg/main.yml

@@ -6,6 +6,10 @@
 
   tasks:
 
+  - name: HOSTNAME | setup
+    ansible.builtin.hostname:
+      name: "{{ ansible_hostname }}"
+
   - name: IMPORT_TASKS | firewall
     ansible.builtin.import_tasks: firewall.yml
 

tasks/system_cfg/shell.yml

 ---
 
 - name: "SHELL | set zsh for {{ my_user }}"
+  when: inventory_hostname in groups.station
   ansible.builtin.user:
     name: "{{ my_user }}"
     shell: /bin/zsh

tasks/system_cfg/templates/ntpd.conf.j2

@@ -5,7 +5,7 @@
 #       This file is managed by Ansible         #
 #       Manual edition will be overridden       #
 #                                               #
-#   https://lab.frogg.it/fcode/ansible/debian   #
+#  https://lab.frogg.it/freezed/ansible-debian  #
 #                                               #
 # ############################################# #
 

tasks/user_cfg/files/dotfiles/gitconfig

@@ -4,7 +4,7 @@
 #       This file is managed by Ansible         #
 #       Manual edition will be overridden       #
 #                                               #
-#   https://lab.frogg.it/fcode/ansible/debian   #
+#  https://lab.frogg.it/freezed/ansible-debian  #
 #                                               #
 # ############################################# #
 

tasks/user_cfg/files/dotfiles/vimrc

@@ -4,7 +4,7 @@
 "       This file is managed by Ansible         "
 "       Manual edition will be overridden       "
 "                                               "
-"   https://lab.frogg.it/fcode/ansible/debian   "
+"  https://lab.frogg.it/freezed/ansible-debian  "
 "   http://formation-debian.via.ecp.fr/         "
 "                                               "
 " """"""""""""""""""""""""""""""""""""""""""""" "
@@ -98,4 +98,4 @@ set incsearch
 "set hlsearch
 
 " Décommentez la ligne suivante si vous voulez afficher les numéros de ligne
-"set number
+set number relativenumber

tasks/user_cfg/files/dotfiles/zlogin

@@ -4,7 +4,7 @@
 #       This file is managed by Ansible         #
 #       Manual edition will be overridden       #
 #                                               #
-#   https://lab.frogg.it/fcode/ansible/debian   #
+#  https://lab.frogg.it/freezed/ansible-debian  #
 #                                               #
 # ############################################# #
 

tasks/user_cfg/files/dotfiles/zlogout

@@ -4,7 +4,7 @@
 #       This file is managed by Ansible         #
 #       Manual edition will be overridden       #
 #                                               #
-#   https://lab.frogg.it/fcode/ansible/debian   #
+#  https://lab.frogg.it/freezed/ansible-debian  #
 #                                               #
 # ############################################# #
 

tasks/user_cfg/files/dotfiles/zshenv

@@ -4,7 +4,7 @@
 #       This file is managed by Ansible         #
 #       Manual edition will be overridden       #
 #                                               #
-#   https://lab.frogg.it/fcode/ansible/debian   #
+#  https://lab.frogg.it/freezed/ansible-debian  #
 #                                               #
 # ############################################# #
 

tasks/user_cfg/files/dotfiles/zshrc

@@ -4,7 +4,7 @@
 #       This file is managed by Ansible         #
 #       Manual edition will be overridden       #
 #                                               #
-#   https://lab.frogg.it/fcode/ansible/debian   #
+#  https://lab.frogg.it/freezed/ansible-debian  #
 #    from http://formation-debian.via.ecp.fr    #
 #                                               #
 # ############################################# #

tasks/user_cfg/templates/pruneconfig.j2

@@ -5,7 +5,7 @@
 #       This file is managed by Ansible         #
 #       Manual edition will be overridden       #
 #                                               #
-#   https://lab.frogg.it/fcode/ansible/debian   #
+#  https://lab.frogg.it/freezed/ansible-debian  #
 #                                               #
 # ############################################# #
 

tasks/user_cfg/templates/ssh_config.j2

@@ -6,7 +6,7 @@
 #       This file is managed by Ansible         #
 #       Manual edition will be overridden       #
 #                                               #
-#   https://lab.frogg.it/fcode/ansible/debian   #
+#  https://lab.frogg.it/freezed/ansible-debian  #
 #                                               #
 # ############################################# #