Skip to content

ObieBent/basic-server

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Basic server

This role describes a basic server, and contains all best practices with regards to locales, default packages, shell and editor config

Requirements

None.

Role Variables

Default variables are defined in defaults/ and vars/ directory :

Variable Default value Description
default_locale en_US.UTF-8 Default locale
rootpromptcolor red Prompt color root user
userpromptcolor green Prompt color default user
promptsite_tag NULL Site information to display in prompt
promptsite_sep "#" Prompt separator
users_groups [] List of groups to create
user_default_shell /bin/bash Default user shell
yum_disabled_plugins ['fastestmirror'] Disable yum plugins
yum_enabled_plugins [] Enable yum plugins
users [] List of users to create
users.sshkeys [] List of sshkeys of users to deploy
extra_packages [] Array of packages to install on the system
extra_remove_packages [] Array of packages to remove on the system
install_epel true Enable EPEL repository on RedHat family
root_password Set root password in crypt form with following command mkpasswd --method=sha-512
install_sudoers true Deploy sudoers
manage_locales true Manage locales
manage_firewalld true Ensure firewalld is installed, enabled and started
disable_network_manager false Ensure NetworkManager is removed and systemd-netowrkd is enabled and started
historytime_format '%Y/%m/%d - %H:%M:%S ' Configure default history time format
manage_hostname true Update /etc/hosts by adding entry with default IP address
remove_loopback_hostname_entry true Remove 127.0.0.1 entry associated to host name fqdn (i.e 127.0.0.1.*hostname.fqdn)
sudo_lines [] Array of sudo lines to deploy on the server
copy_admin_scripts false Deploy powerfull admin scripts
service_disabled [] List to service to stopped and disabled at boot
main_interface ansible_default_ipv4.interface Default main interface

DNS options :

Variable Default value Description
dns_search [] Array of search domain
dns_servers ['8.8.8.8'] Array of dns servers
dns_domain NULL Dns domain of the server

SSH options :

Variable Default value Description
ssh_enable_passwd_auth yes Enable/disable password authentication
ssh_enable_root_login yes Enable/disable root login
ssh_use_dns yes Enable/disable DNS resolution

ATOP options :

Variable Default value Description
atop_enable yes Enable/disable atop installation
atop_interval 600 Log interval
atop_retention_day 21 Logs retention

Logrotate options :

Variable Default value Description
logrotate_enable true Enable/disable logrotate installation and specific configuration
logrotate_compress true Enable/disable logrotate compression
logrotate_period weekly Set default logrotate period (daily, weekly, monthly)
logrotate_rotate 4 Period retention before removing log files

/etc/hosts entry :

Variable Default value Description
hosts_entry.ip Host IP address
hosts_entry.fqdn Host Fully Qualify Domain Name
hosts_entry.hostname Host name

Sample playbooks

Deploy configuration with epel-release installed as an extra package

- hosts: all
  roles:
    - role: basicserver
      extra_packages:
        - epel-release

Prompt configuration

The following variable allows you to alter the default prompt (light green) :

  • rootpromptcolor: red

You can choose the prompt color among ANSI colors : black, red, green, yellow, blue, magenta, cyan, white

Install additionnal packages

The following variable allows you to install additionnal packages :

  • extra_packages

It takes a list of packages to install

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published