diff --git a/tasks/files/sshd_config b/tasks/files/sshd_config index 5bacb890548c0bc4f46399d4426f7332b17f7b7c..be1872db862aac1bdbbc874645734ff258ce4130 100644 --- a/tasks/files/sshd_config +++ b/tasks/files/sshd_config @@ -4,7 +4,7 @@ # This file is managed by Ansible # # Manual edition will be overridden # # # -# https://lab.frogg.it/fcode/ansible/debian # +# https://lab.frogg.it/freezed/ansible-debian # # # # ############################################# # diff --git a/tasks/system_cfg/firewall.yml b/tasks/system_cfg/firewall.yml index ea26c82c7d96bbd74396eb3e1734c6d98f892c8a..d09e48a0c1c73e335543590147b1487a5323a8c9 100644 --- a/tasks/system_cfg/firewall.yml +++ b/tasks/system_cfg/firewall.yml @@ -23,6 +23,26 @@ direction: outgoing policy: allow +- name: UFW | allow local IPs on port 22 IN + when: inventory_hostname in groups.station + loop: "{{ groups['station'] }}" + community.general.ufw: + direction: in + port: '22' + proto: tcp + rule: allow + src: "{{hostvars[item]['ansible_host']}}" + +- name: "UFW | allow {{gateway}} IP on port 22 IN" + when: (inventory_hostname in groups.production) or + (inventory_hostname in groups.devel) + community.general.ufw: + direction: in + port: '22' + proto: tcp + rule: allow + src: "{{gateway}}" + - name: UFW | limit tcp port 22 IN community.general.ufw: direction: in diff --git a/tasks/system_cfg/main.yml b/tasks/system_cfg/main.yml index 2169f10af6920a7e3943c89412cd68eb293ae4ad..8edec4cd33971891f8320ba75305a83ac5817b0d 100644 --- a/tasks/system_cfg/main.yml +++ b/tasks/system_cfg/main.yml @@ -6,6 +6,10 @@ tasks: + - name: HOSTNAME | setup + ansible.builtin.hostname: + name: "{{ ansible_hostname }}" + - name: IMPORT_TASKS | firewall ansible.builtin.import_tasks: firewall.yml diff --git a/tasks/system_cfg/shell.yml b/tasks/system_cfg/shell.yml index 0f39c034ed4de16dda7c2a770e77043002c2a808..442486196a769d346f09e7316d773458e9a99eaf 100644 --- a/tasks/system_cfg/shell.yml +++ b/tasks/system_cfg/shell.yml @@ -1,6 +1,7 @@ --- - name: "SHELL | set zsh for {{ my_user }}" + when: inventory_hostname in groups.station ansible.builtin.user: name: "{{ my_user }}" shell: /bin/zsh diff --git a/tasks/system_cfg/templates/ntpd.conf.j2 b/tasks/system_cfg/templates/ntpd.conf.j2 index f9c6a26f74e4d459ae31f535134f3d1e447accfd..37c2f70c1eca517711cf872952505e3b7d798692 100644 --- a/tasks/system_cfg/templates/ntpd.conf.j2 +++ b/tasks/system_cfg/templates/ntpd.conf.j2 @@ -5,7 +5,7 @@ # This file is managed by Ansible # # Manual edition will be overridden # # # -# https://lab.frogg.it/fcode/ansible/debian # +# https://lab.frogg.it/freezed/ansible-debian # # # # ############################################# # diff --git a/tasks/user_cfg/files/dotfiles/gitconfig b/tasks/user_cfg/files/dotfiles/gitconfig index 223dd52769c0be8f91c128b269988798ab170966..cd596e9f49f6a44722855a7eff48436e19bc87d4 100644 --- a/tasks/user_cfg/files/dotfiles/gitconfig +++ b/tasks/user_cfg/files/dotfiles/gitconfig @@ -4,7 +4,7 @@ # This file is managed by Ansible # # Manual edition will be overridden # # # -# https://lab.frogg.it/fcode/ansible/debian # +# https://lab.frogg.it/freezed/ansible-debian # # # # ############################################# # diff --git a/tasks/user_cfg/files/dotfiles/vimrc b/tasks/user_cfg/files/dotfiles/vimrc index a65bfe1ff3ded3fa108b1ca6f14145217fdfdc4a..086b5543282a8ba75dfa5b1c4046ed0322d74110 100644 --- a/tasks/user_cfg/files/dotfiles/vimrc +++ b/tasks/user_cfg/files/dotfiles/vimrc @@ -4,7 +4,7 @@ " This file is managed by Ansible " " Manual edition will be overridden " " " -" https://lab.frogg.it/fcode/ansible/debian " +" https://lab.frogg.it/freezed/ansible-debian " " http://formation-debian.via.ecp.fr/ " " " " """"""""""""""""""""""""""""""""""""""""""""" " @@ -98,4 +98,4 @@ set incsearch "set hlsearch " Décommentez la ligne suivante si vous voulez afficher les numéros de ligne -"set number +set number relativenumber diff --git a/tasks/user_cfg/files/dotfiles/zlogin b/tasks/user_cfg/files/dotfiles/zlogin index 7131f70acff2f283b54da5cfd5cb0fbedd031d26..fe6db75cb8e6b2eccff6afe8912654733f099ff3 100644 --- a/tasks/user_cfg/files/dotfiles/zlogin +++ b/tasks/user_cfg/files/dotfiles/zlogin @@ -4,7 +4,7 @@ # This file is managed by Ansible # # Manual edition will be overridden # # # -# https://lab.frogg.it/fcode/ansible/debian # +# https://lab.frogg.it/freezed/ansible-debian # # # # ############################################# # diff --git a/tasks/user_cfg/files/dotfiles/zlogout b/tasks/user_cfg/files/dotfiles/zlogout index b2b9439b107c6ea8bc01c5607c20ace7ab967bc1..d2323a0468270cb3f255d5b9b18ddb4057033288 100644 --- a/tasks/user_cfg/files/dotfiles/zlogout +++ b/tasks/user_cfg/files/dotfiles/zlogout @@ -4,7 +4,7 @@ # This file is managed by Ansible # # Manual edition will be overridden # # # -# https://lab.frogg.it/fcode/ansible/debian # +# https://lab.frogg.it/freezed/ansible-debian # # # # ############################################# # diff --git a/tasks/user_cfg/files/dotfiles/zshenv b/tasks/user_cfg/files/dotfiles/zshenv index 2bc3fe02e107337239027f833698f19fb6f306c9..d22f1b3f25cdcd27d7f9f4fb5af368542a7d5fb8 100644 --- a/tasks/user_cfg/files/dotfiles/zshenv +++ b/tasks/user_cfg/files/dotfiles/zshenv @@ -4,7 +4,7 @@ # This file is managed by Ansible # # Manual edition will be overridden # # # -# https://lab.frogg.it/fcode/ansible/debian # +# https://lab.frogg.it/freezed/ansible-debian # # # # ############################################# # diff --git a/tasks/user_cfg/files/dotfiles/zshrc b/tasks/user_cfg/files/dotfiles/zshrc index 735d779c1ce453e429b563f8df7cfb0075770de9..0a597e1d4f0960053aa0528f95413934bcaebad6 100644 --- a/tasks/user_cfg/files/dotfiles/zshrc +++ b/tasks/user_cfg/files/dotfiles/zshrc @@ -4,7 +4,7 @@ # This file is managed by Ansible # # Manual edition will be overridden # # # -# https://lab.frogg.it/fcode/ansible/debian # +# https://lab.frogg.it/freezed/ansible-debian # # from http://formation-debian.via.ecp.fr # # # # ############################################# # diff --git a/tasks/user_cfg/templates/pruneconfig.j2 b/tasks/user_cfg/templates/pruneconfig.j2 index bea383e620ce7b7137bcdf5ce0765b211f011ef7..3bfdb5db32e22e069f566da0eb05ec8d3b658668 100644 --- a/tasks/user_cfg/templates/pruneconfig.j2 +++ b/tasks/user_cfg/templates/pruneconfig.j2 @@ -5,7 +5,7 @@ # This file is managed by Ansible # # Manual edition will be overridden # # # -# https://lab.frogg.it/fcode/ansible/debian # +# https://lab.frogg.it/freezed/ansible-debian # # # # ############################################# # diff --git a/tasks/user_cfg/templates/ssh_config.j2 b/tasks/user_cfg/templates/ssh_config.j2 index 12a8ffda2f6f032540576865ab675c692e56e097..05e7661dc76eec06b75f1defb0dd7394e83890b0 100644 --- a/tasks/user_cfg/templates/ssh_config.j2 +++ b/tasks/user_cfg/templates/ssh_config.j2 @@ -6,7 +6,7 @@ # This file is managed by Ansible # # Manual edition will be overridden # # # -# https://lab.frogg.it/fcode/ansible/debian # +# https://lab.frogg.it/freezed/ansible-debian # # # # ############################################# #