X-Git-Url: https://freie-schul-it.de/gitweb/fsit-cmgt.git/blobdiff_plain/6414dd03011cbdae89d88aabf59d537e4a2880f1..0ff787b9b115fd25bbf5ca6809de65767556db4d:/library/bootstrap.yml?ds=sidebyside diff --git a/library/bootstrap.yml b/library/bootstrap.yml index 2e6a5bd..46716a5 100644 --- a/library/bootstrap.yml +++ b/library/bootstrap.yml @@ -5,42 +5,48 @@ update_password: always password: "{{ ansibleuser|password_hash('sha512') }}" - name: hide system-account - ansible.builtin.copy: - dest: /var/lib/AccountsService/users/ansible - content: | - [User] - Session= - XSession= - Icon=/home/ansible/.face - SystemAccount=true - [InputSource0] - xkb=de + ansible.builtin.lineinfile: + path: /var/lib/AccountsService/users/ansible + regex: 'SystemAccount=*' + line: 'SystemAccount=true' - name: remove apt-config-file derived from preseeding ansible.builtin.file: path: /etc/apt/apt.conf state: absent - name: copy new apt-proxy config file to apt.conf.d-dir - ansible.builtin.template: - src: fsit-cmgt/templates/apt-proxy_01proxy.j2 + ansible.builtin.copy: dest: /etc/apt/apt.conf.d/01proxy + content: | + Acquire::http { Proxy "http://{{ aptproxy }}:3142"; }; + Acquire::https { Proxy "https://"; }; +- name: prepare ubuntu-DNS for working in local network + file: + src: /run/systemd/resolve/resolv.conf + dest: /etc/resolv.conf + state: link + force: yes + when: ansible_facts['distribution'] == 'Ubuntu' - name: Update and upgrade apt packages apt: - update_cache: yes - upgrade: yes + update_cache: true + upgrade: true + autoremove: true - name: install core-packages apt: pkg: - htop - - glances +# - glances - inxi - bmon - vim - #- name: stop automatic remote printer installation - #ansible.builtin.systemd: - #name: cups-browsed - #state: stopped - #- name: disable automatic remote printer installation - #ansible.builtin.systemd: - #name: cups-browsed - #enabled: no + - mtr-tiny + - tmux +#- name: stop automatic remote printer installation +# ansible.builtin.systemd: +# name: cups-browsed +# state: stopped +#- name: disable automatic remote printer installation +# ansible.builtin.systemd: +# name: cups-browsed +# enabled: no ...