32 lines
655 B
YAML
32 lines
655 B
YAML
---
|
|
- name: Set timezone
|
|
community.general.timezone:
|
|
name: "{{ timezone }}"
|
|
become: true
|
|
|
|
- name: Enable and start chronyd
|
|
ansible.builtin.systemd:
|
|
name: chronyd
|
|
state: started
|
|
enabled: true
|
|
become: true
|
|
|
|
- name: Update all packages
|
|
ansible.builtin.package:
|
|
name: "*"
|
|
state: latest
|
|
become: true
|
|
|
|
- name: Install baseline packages
|
|
ansible.builtin.package:
|
|
name: "{{ baseline_packages }}"
|
|
state: present
|
|
become: true
|
|
|
|
- name: Disable root SSH login
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/ssh/sshd_config
|
|
regexp: '^PermitRootLogin'
|
|
line: "PermitRootLogin no"
|
|
become: true
|
|
notify: Restart sshd |