|
|
---
|
|
|
|
|
|
- name: Enable use of proxy for retrieving system packages via apt
|
|
|
template: src="apt_proxy.j2" dest="/etc/apt/apt.conf.d/00proxy"
|
|
|
owner=root group=root mode=644
|
|
|
when: apt_proxy is defined
|
|
|
|
|
|
- name: Disable use of proxy for retrieving system packages via apt
|
|
|
file: path="/etc/apt/apt.conf.d/00proxy" state=absent
|
|
|
when: apt_proxy is undefined
|
|
|
|
|
|
- name: Deploy pam-auth-update configuration file for enabling pam_umask
|
|
|
copy: src=pam_umask dest=/usr/share/pam-configs/umask mode=644 owner=root group=root
|
|
|
notify: Update PAM configuration
|
|
|
|
|
|
- name: Set login UMASK
|
|
|
lineinfile: dest=/etc/login.defs state=present backrefs=yes regexp='^UMASK(\s+)' line='UMASK\g<1>027'
|
|
|
|
|
|
- name: Set home directory mask
|
|
|
lineinfile: dest=/etc/adduser.conf state=present backrefs=yes regexp='^DIR_MODE=' line='DIR_MODE=0750'
|
|
|
|
|
|
- name: Install sudo
|
|
|
apt: name=sudo state=present
|
|
|
|
|
|
- name: Install ssl-cert package
|
|
|
apt: name=ssl-cert state=present
|
|
|
|
|
|
- name: Install common packages
|
|
|
apt: name="{{ item }}" state="present"
|
|
|
with_items: common_packages
|
|
|
|
|
|
- name: Set-up operating system groups
|
|
|
group: name="{{ item.name }}" gid="{{ item.gid }}" state=present
|
|
|
with_items: os_groups
|
|
|
|