65 lines
1.6 KiB
YAML
65 lines
1.6 KiB
YAML
|
---
|
||
|
- name: "Set a password for the root user."
|
||
|
shell: "PATH=/usr/bin:/usr/sbin:/bin:/sbin chroot /mnt /bin/sh -c 'echo root:{{ root }} | chpasswd -'"
|
||
|
- name: "Enable default services."
|
||
|
shell: "PATH=/usr/bin:/usr/sbin:/bin:/sbin chroot /mnt rc-update add {{ item.service }} {{ item.runlevel }}"
|
||
|
args:
|
||
|
creates: "/mnt/etc/runlevels/{{ item.runlevel }}/{{ item.service }}"
|
||
|
loop:
|
||
|
- runlevel: "sysinit"
|
||
|
service: "devfs"
|
||
|
- runlevel: "sysinit"
|
||
|
service: "dmesg"
|
||
|
- runlevel: "sysinit"
|
||
|
service: "mdev"
|
||
|
- runlevel: "sysinit"
|
||
|
service: "hwdrivers"
|
||
|
- runlevel: "sysinit"
|
||
|
service: "modloop"
|
||
|
- runlevel: "boot"
|
||
|
service: "modules"
|
||
|
- runlevel: "boot"
|
||
|
service: "sysctl"
|
||
|
- runlevel: "boot"
|
||
|
service: "hostname"
|
||
|
- runlevel: "boot"
|
||
|
service: "bootmisc"
|
||
|
- runlevel: "boot"
|
||
|
service: "syslog"
|
||
|
- runlevel: "shutdown"
|
||
|
service: "mount-ro"
|
||
|
- runlevel: "shutdown"
|
||
|
service: "killprocs"
|
||
|
- runlevel: "shutdown"
|
||
|
service: "savecache"
|
||
|
- runlevel: "default"
|
||
|
service: "networking"
|
||
|
- runlevel: "default"
|
||
|
service: "iptables"
|
||
|
- runlevel: "default"
|
||
|
service: "ip6tables"
|
||
|
- runlevel: "default"
|
||
|
service: "node-exporter"
|
||
|
- runlevel: "default"
|
||
|
service: "sshd"
|
||
|
- runlevel: "boot"
|
||
|
service: "hwclock"
|
||
|
- runlevel: "boot"
|
||
|
service: "swclock"
|
||
|
- name: "Install firewall rules."
|
||
|
template:
|
||
|
src: "templates/{{ item }}.j2"
|
||
|
dest: "/mnt/etc/iptables/{{ item }}"
|
||
|
loop:
|
||
|
- rules-save
|
||
|
- rules6-save
|
||
|
- name: "And blocklists."
|
||
|
template:
|
||
|
src: "templates/{{ item }}.j2"
|
||
|
dest: "/mnt/etc/ipset.d/{{ item }}"
|
||
|
loop:
|
||
|
- blocklist4
|
||
|
- blocklist6
|
||
|
- name: "Reboot!"
|
||
|
reboot:
|