65 lines
1.3 KiB
YAML
65 lines
1.3 KiB
YAML
- name: Добавление SSH ключа
|
|
ansible.posix.authorized_key:
|
|
user: "{{ansible_user}}"
|
|
key: "{{ lookup('file', playbook_dir + '/id_ed25519_simbirkey.pub') }}"
|
|
state: present
|
|
|
|
- name: Установка необходимых пакетов
|
|
ansible.builtin.apt:
|
|
name:
|
|
- ufw
|
|
- openssl
|
|
- openssh-server
|
|
- tar
|
|
- cron
|
|
state: present
|
|
update_cache: true
|
|
become: true
|
|
|
|
- name: Разрешить SSH
|
|
community.general.ufw:
|
|
rule: allow
|
|
name: openssh
|
|
become: true
|
|
|
|
- name: Разрешить HTTP и HTTPS
|
|
community.general.ufw:
|
|
rule: allow
|
|
port: "{{ item }}"
|
|
proto: tcp
|
|
become: true
|
|
loop:
|
|
- "80"
|
|
- "443"
|
|
|
|
- name: Включение и запуск файрволла
|
|
community.general.ufw:
|
|
state: enabled
|
|
default: deny
|
|
become: true
|
|
|
|
- name: Перезагрузка файрволла
|
|
ansible.builtin.command: ufw reload
|
|
become: true
|
|
|
|
- name: Включение и запуск SSH
|
|
ansible.builtin.systemd_service:
|
|
name: ssh
|
|
enabled: true
|
|
state: started
|
|
become: true
|
|
|
|
- name: Включение и запуск cron
|
|
ansible.builtin.systemd_service:
|
|
name: cron
|
|
state: started
|
|
enabled: true
|
|
become: true
|
|
|
|
- name: Установка UTC для cron
|
|
ansible.builtin.cron:
|
|
name: CRON_TZ
|
|
env: true
|
|
job: UTC
|
|
become: true
|