summaryrefslogtreecommitdiff
path: root/ansible/riki-dev.yml
blob: 67b9b9bc6e740618ad57e65f3643ff7655624892 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
- hosts: riki-dev
  remote_user: debian
  become: yes
  roles:
    - role: sane_debian_system
      tags: [sane]
    - role: sshd
      tags: [sshd]
    - role: comfortable-debian-system
      tags: [comfy]
    - role: unix_users
      tags: [users]
    - role: rust-rustup
      tags: [rustup]
    - role: liw
      tags: [liw]
  tasks:
    - apt:
        name:
          - build-essential
          - debhelper
          - pandoc
    - sysctl:
        name: kernel.perf_event_paranoid
        value: "0"
        state: present
        sysctl_set: yes
  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bookworm
    sane_debian_system_timezone: Europe/Helsinki
    sane_debian_system_sources_lists:
      - repo: |
          deb http://security.debian.org/debian-security bullseye-security main contrib non-free

      - repo: deb http://apt.liw.fi/debian unstable-ci main
        signing_key: "{{ apt_liw_fi_signing_key }}"

    unix_users_version: 2
    unix_users:
      - username: liw
        comment: Lars Wirzenius

    rustup_cargo_install: |
      flamegraph

    sshd_version: 1
    sshd_allow_authorized_keys: yes