blob: 38f46d0376fd3b46b2733c55ccae291f793d7d63 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
- hosts: solace
remote_user: root
become: no
roles:
- role: sane_debian_system
- role: sshd
- role: ssd
- role: comfortable-debian-system
- role: version-controller
- role: vmhost
- role: mail-client
- role: unix_users
- role: rust-rustup
- role: liw
- role: self-updating-system
tasks:
# Remove ping to force it be reinstalled so that the right
# capabilities are set.
- apt:
name: iputils-ping
state: absent
- name: install command line utilities
apt:
name:
- build-essential
- firmware-misc-nonfree
- firmware-realtek
- iputils-ping
- locales-all
- memtest86+
- python3
- rsync
- time
- vim
- wireless-regdb
- name: "configure GRUB to wait a little before booting"
lineinfile:
path: /etc/default/grub
regexp: GRUB_TIMEOUT
line: "GRUB_TIMEOUT=5"
- name: "update grub"
shell: |
update-grub
vars:
ansible_python_interpreter: /usr/bin/python3
sane_debian_system_version: 2
sane_debian_system_hostname: "{{ inventory_hostname }}"
sane_debian_system_codename: bookworm
sane_debian_system_timezone: Europe/Helsinki
sane_debian_system_sources_lists:
- repo: |
deb http://deb.debian.org/debian bookworm contrib non-free non-free-firmware
- repo: |
deb http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware
- repo: deb http://apt.liw.fi/debian unstable main
signing_key: "{{ apt_liw_fi_signing_key }}"
unix_users_version: 2
unix_users:
- username: liw
comment: Lars Wirzenius
groups:
- libvirt
mailname: "{{ sane_debian_system_hostname }}.liw.fi"
relayhost: pieni.net:587
smarthost: pieni.net
smarthost_user: pienirelay
smarthost_password: "{{ lookup('pipe', 'pass show pieni.net/pienirelay') }}"
rustup_cargo_install: |
starship \
bottom
sshd_version: 1
|
