ansible-role-os-bootstrap/tasks/main.yml

70 lines
2.1 KiB
YAML

---
- name: HTTP client proxy
ansible.builtin.import_tasks: http_client_proxy.yml
- name: Python3 requirements for ansible
ansible.builtin.import_tasks: ansible-python3-pkgs.yml
- name: Set the hostname
ansible.builtin.import_tasks: hostname.yml
- name: Set the locale
ansible.builtin.import_tasks: locale.yml
- name: Set the timezone
ansible.builtin.import_tasks: timezone.yml
- name: Manage customizations to the /etc/hosts file
ansible.builtin.import_tasks: etchosts-customizations.yml
- name: Additional network interfaces
ansible.builtin.import_tasks: network-interfaces.yml
- name: Manage additional disk volumes
ansible.builtin.import_tasks: additional_disks.yml
when: additional_disks
- name: Manage a swap device
ansible.builtin.import_tasks: swap_device.yml
when: swap_device
#
# Distribution-specific setup
#
- name: External repositories for EL/RedHat
ansible.builtin.import_tasks: external_repos_el.yml
when: ansible_distribution_file_variety == "RedHat"
- name: Basic setup for EL/RedHat
ansible.builtin.import_tasks: basic_setup_el.yml
when: ansible_distribution_file_variety == "RedHat"
- name: General setup for Debian/Ubuntu
ansible.builtin.import_tasks: deb_general.yml
when: ansible_distribution_file_variety == "Debian"
#
# Common configuration
#
- name: Sysctl kernel parameters
ansible.builtin.import_tasks: sysctl.yml
- name: Grub command line parameters
ansible.builtin.import_tasks: grub_cmdline_parameters.yml
- name: Create a directory that will contain the local generated certificates
ansible.builtin.import_tasks: pki_dir.yml
- name: Self signed certificates waiting for the letsencrypt ones
ansible.builtin.import_tasks: self_signed_certificate.yml
when: letsencrypt_acme_install is defined and letsencrypt_acme_install
- name: Manage the trusted CAs
ansible.builtin.import_tasks: trusted_ca.yml
- name: Certificate from private CA (mkcert)
ansible.builtin.import_tasks: certificate_from_private_ca.yml
when:
- (letsencrypt_acme_install is not defined) or (not letsencrypt_acme_install)
- mkcert_create_certificate