diff options
| author | Ahmed Abdelhalim <[email protected]> | 2025-12-11 13:19:27 +0100 |
|---|---|---|
| committer | Ahmed Abdelhalim <[email protected]> | 2025-12-11 13:49:22 +0100 |
| commit | eae6dd4c9e38908e6b433f733d41663015e8c93f (patch) | |
| tree | 492ba46b0f628e54e87410280f55166b960e6a9f | |
| parent | c91b559e67d7ae8c518ff8014443244fbb411dcc (diff) | |
Add no_logs to semi-sensitive tasks to follow best practices
| -rw-r--r-- | roles/gpg/tasks/main.yml | 1 | ||||
| -rw-r--r-- | roles/grafana/tasks/main.yml | 1 | ||||
| -rw-r--r-- | roles/pihole/tasks/main.yml | 1 | ||||
| -rw-r--r-- | roles/user/tasks/main.yml | 1 | ||||
| -rw-r--r-- | roles/wg_portal/tasks/main.yml | 1 |
5 files changed, 5 insertions, 0 deletions
diff --git a/roles/gpg/tasks/main.yml b/roles/gpg/tasks/main.yml index 6419d88d..be5402cb 100644 --- a/roles/gpg/tasks/main.yml +++ b/roles/gpg/tasks/main.yml @@ -19,3 +19,4 @@ register: gpg_import_result changed_when: "'imported' in gpg_import_result.stderr" failed_when: gpg_import_result.rc != 0 and 'already in secret keyring' not in gpg_import_result.stderr + no_log: true diff --git a/roles/grafana/tasks/main.yml b/roles/grafana/tasks/main.yml index 5cae1990..30db5c83 100644 --- a/roles/grafana/tasks/main.yml +++ b/roles/grafana/tasks/main.yml @@ -51,6 +51,7 @@ - src: "dashboards/dashboards.yml.j2" dest: "/etc/grafana/provisioning/dashboards/dashboards.yml" notify: "Restart grafana" + no_log: true - name: "Provision Grafana community dashboards" notify: "Restart grafana" diff --git a/roles/pihole/tasks/main.yml b/roles/pihole/tasks/main.yml index a45a1482..27c7e6c1 100644 --- a/roles/pihole/tasks/main.yml +++ b/roles/pihole/tasks/main.yml @@ -43,6 +43,7 @@ group: "pihole" mode: "0644" notify: "Restart pihole" + no_log: true # pihole.toml is being rewritten after successful setup # This is why this task is not idempotent and can't be. tags: diff --git a/roles/user/tasks/main.yml b/roles/user/tasks/main.yml index 064e29cf..1177b707 100644 --- a/roles/user/tasks/main.yml +++ b/roles/user/tasks/main.yml @@ -25,6 +25,7 @@ update_password: "on_create" register: user notify: "Require password change" + no_log: true - name: "Create user ssh directory" ansible.builtin.file: diff --git a/roles/wg_portal/tasks/main.yml b/roles/wg_portal/tasks/main.yml index edc04e21..b3e45731 100644 --- a/roles/wg_portal/tasks/main.yml +++ b/roles/wg_portal/tasks/main.yml @@ -85,6 +85,7 @@ group: "wg-portal" mode: "0640" notify: "Restart wg-portal" + no_log: true - name: "Create wg-portal nginx configurations" become: true |