move roles

ansible/playbooks/roles/common/tasks/main.yml

@@ -0,0 +1,45 @@
+# ------------------------------------------------------------------------------
+# FILE: roles/common/tasks/main.yml
+# DESCRIPTION: Baseline configuration applied to all managed hosts.
+#              Handles hostname, timezone, core packages, NTP, and
+#              ansible user setup.
+# ------------------------------------------------------------------------------
+
+- name: Set hostname
+  hostname:
+    name: "{{ inventory_hostname | replace('_', '-') }}"
+
+- name: Set timezone
+  timezone:
+    name: "{{ common_timezone }}"
+
+- name: Update apt cache
+  apt:
+    update_cache: yes
+    cache_valid_time: 3600
+
+- name: Install base utility packages
+  apt:
+    name: "{{ common_packages }}"
+    state: present
+
+- name: Configure NTP to use sundial
+  template:
+    src: timesyncd.conf.j2
+    dest: /etc/systemd/timesyncd.conf
+    mode: '0644'
+  notify: restart timesyncd
+
+- name: Ensure systemd-timesyncd is enabled and running
+  systemd:
+    name: systemd-timesyncd
+    state: started
+    enabled: yes
+
+- name: Ensure ansible user has sudo without password
+  lineinfile:
+    path: /etc/sudoers.d/{{ ansible_user }}
+    line: "{{ ansible_user }} ALL=(ALL) NOPASSWD:ALL"
+    create: yes
+    mode: '0440'
+    validate: 'visudo -cf %s'