move roles

ansible/playbooks/roles/common/defaults/main.yml

@@ -0,0 +1,22 @@
+---
+# ------------------------------------------------------------------------------
+# FILE: roles/common/defaults/main.yml
+# ------------------------------------------------------------------------------
+
+common_timezone: America/Chicago
+
+common_ntp_server: 10.1.71.33  # sundial
+
+common_packages:
+  - curl
+  - wget
+  - vim
+  - htop
+  - git
+  - jq
+  - unzip
+  - ca-certificates
+  - gnupg
+  - lsb-release
+  - net-tools
+  - dnsutils

ansible/playbooks/roles/common/handlers/main.yml

@@ -0,0 +1,8 @@
+# ------------------------------------------------------------------------------
+# FILE: roles/common/handlers/main.yml
+# ------------------------------------------------------------------------------
+
+- name: restart timesyncd
+  systemd:
+    name: systemd-timesyncd
+    state: restarted

ansible/playbooks/roles/common/main.yml

@@ -0,0 +1,22 @@
+---
+# ------------------------------------------------------------------------------
+# FILE: roles/common/defaults/main.yml
+# ------------------------------------------------------------------------------
+
+common_timezone: America/Chicago
+
+common_ntp_server: 10.1.71.33  # sundial
+
+common_packages:
+  - curl
+  - wget
+  - vim
+  - htop
+  - git
+  - jq
+  - unzip
+  - ca-certificates
+  - gnupg
+  - lsb-release
+  - net-tools
+  - dnsutils

ansible/playbooks/roles/common/tasks/main.yml

@@ -0,0 +1,45 @@
+# ------------------------------------------------------------------------------
+# FILE: roles/common/tasks/main.yml
+# DESCRIPTION: Baseline configuration applied to all managed hosts.
+#              Handles hostname, timezone, core packages, NTP, and
+#              ansible user setup.
+# ------------------------------------------------------------------------------
+
+- name: Set hostname
+  hostname:
+    name: "{{ inventory_hostname | replace('_', '-') }}"
+
+- name: Set timezone
+  timezone:
+    name: "{{ common_timezone }}"
+
+- name: Update apt cache
+  apt:
+    update_cache: yes
+    cache_valid_time: 3600
+
+- name: Install base utility packages
+  apt:
+    name: "{{ common_packages }}"
+    state: present
+
+- name: Configure NTP to use sundial
+  template:
+    src: timesyncd.conf.j2
+    dest: /etc/systemd/timesyncd.conf
+    mode: '0644'
+  notify: restart timesyncd
+
+- name: Ensure systemd-timesyncd is enabled and running
+  systemd:
+    name: systemd-timesyncd
+    state: started
+    enabled: yes
+
+- name: Ensure ansible user has sudo without password
+  lineinfile:
+    path: /etc/sudoers.d/{{ ansible_user }}
+    line: "{{ ansible_user }} ALL=(ALL) NOPASSWD:ALL"
+    create: yes
+    mode: '0440'
+    validate: 'visudo -cf %s'

ansible/playbooks/roles/common/templates/timesyncd.conf.j2

@@ -0,0 +1,4 @@
+# Managed by Ansible — do not edit manually
+[Time]
+NTP={{ common_ntp_server }}
+FallbackNTP=ntp.ubuntu.com