umgebaut und verschlankt

[fsit-cmgt.git] / library / bootstrap.yml

diff --git a/library/bootstrap.yml b/library/bootstrap.yml
index 8b2f44b35d5811af429a6ee34a0abd7dca559ed0..0b36ab1a5e3a9fd8e35954016fde0ad264dead9d 100644 (file)
--- a/library/bootstrap.yml
+++ b/library/bootstrap.yml
@@ -1,38 +1,42 @@
 ---
-   - name: change ansible-user password
-     user:
-       name: ansible
-       update_password: always
-       password: "{{ ansibleuser|password_hash('sha512') }}"
-   - name: hide system-account
-     copy:
-       src: fsit-cmgt/files/gdm-ansible
-       dest: /var/lib/AccountsService/users/ansible
-       #- name: stop automatic remote printer installation
-       #ansible.builtin.systemd:
-       #name: cups-browsed
-       #state: stopped
-       #- name: disable automatic remote printer installation
-       #ansible.builtin.systemd:
-       #name: cups-browsed
-       #enabled: no
-   - name: remove apt-config-file derived from preseeding
-     ansible.builtin.file:
-       path: /etc/apt/apt.conf
-       state: absent
-   - name: copy new apt-proxy config file to apt.conf.d-dir
-     ansible.builtin.template:
-       src: files/apt-proxy_01proxy.j2
-       dest: /etc/apt/apt.conf.d/01proxy
-   - name: Update and upgrade apt packages
-     apt:
-       update_cache: yes
-       upgrade: yes
-   - name: install core-packages
-     apt:
-       pkg:
-       - htop
-       - glances
-       - inxi
-       - bmon
+- name: change ansible-user password
+  ansible.builtin.user:
+    name: ansible
+    update_password: always
+    password: "{{ ansibleuser|password_hash('sha512') }}"
+- name: hide system-account
+  ansible.builtin.lineinfile:
+    path: /var/lib/AccountsService/users/ansible
+    regex: 'SystemAccount=*'
+    line: 'SystemAccount=true'
+- name: remove apt-config-file derived from preseeding
+  ansible.builtin.file:
+    path: /etc/apt/apt.conf
+    state: absent
+- name: copy new apt-proxy config file to apt.conf.d-dir
+  ansible.builtin.copy:
+    dest: /etc/apt/apt.conf.d/01proxy
+    content: |
+      Acquire::http { Proxy "http://{{ aptproxy }}:3142"; };
+      Acquire::https { Proxy "https://"; };
+- name: Update and upgrade apt packages
+  apt:
+    update_cache: yes
+    upgrade: yes
+- name: install core-packages
+  apt:
+    pkg:
+    - htop
+    - glances
+    - inxi
+    - bmon
+    - vim
+#- name: stop automatic remote printer installation
+#  ansible.builtin.systemd:
+#    name: cups-browsed
+#    state: stopped
+#- name: disable automatic remote printer installation
+#  ansible.builtin.systemd:
+#    name: cups-browsed
+#    enabled: no
 ...