blob: 24a3422463c9129b87aef9df6c1e0514fc98b6b8 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
---
- name: "Include OS-specific variables"
ansible.builtin.include_vars: "{{ ansible_os_family | lower }}.yml"
- name: "Ensure settings packages are installed"
become: true
ansible.builtin.package:
name: "{{ item }}"
state: "present"
with_items:
- "{{ settings_pw_quality }}"
- "{{ settings_locale_pkg }}"
- "tzdata"
- name: "Link localtime"
become: true
ansible.builtin.file:
src: "/usr/share/zoneinfo/{{ settings_timezone }}"
dest: "/etc/localtime"
state: "link"
- name: "Update timezone"
become: true
community.general.timezone:
name: "{{ settings_timezone }}"
- name: "Update locale.gen"
become: true
ansible.builtin.lineinfile:
dest: "/etc/locale.gen"
mode: "0644"
regexp: "^#{{ item }}"
line: "{{ item }}"
with_items: "{{ settings_locales }}"
notify: "Run locale-gen"
- name: "Update locale.conf"
become: true
ansible.builtin.copy:
dest: "/etc/locale.conf"
mode: "0644"
content: |
LANG={{ settings_locales_lang }}
LANGUAGE={{ settings_locales_language }}
LC_CTYPE={{ settings_locales_lc_ctype }}
LC_NUMERIC={{ settings_locales_lc_numeric }}
LC_TIME={{ settings_locales_lc_time }}
LC_COLLATE={{ settings_locales_lc_collate }}
LC_MONETARY={{ settings_locales_lc_monetary }}
LC_MESSAGES={{ settings_locales_lc_messages }}
LC_PAPER={{ settings_locales_lc_paper }}
LC_NAME={{ settings_locales_lc_name }}
LC_ADDRESS={{ settings_locales_lc_address }}
LC_TELEPHONE={{ settings_locales_lc_telephone }}
LC_MEASUREMENT={{ settings_locales_lc_measurement }}
LC_IDENTIFICATION={{ settings_locales_lc_identification }}
- name: "Configure archlinux password policy"
become: true
ansible.builtin.template:
src: "archlinux-pam-pw.j2"
dest: "/etc/pam.d/system-auth"
mode: "0644"
when: ansible_os_family == "Archlinux"
# Password policy is technically not required for boot,
# But it's quite nice to configure it for boot and therefore
# enforce the required policies/configurations wanted for the first passwrod change
tags: ["required_for_boot"]
- name: "Configure debian password policy"
become: true
ansible.builtin.template:
src: "debian-pam-pw.j2"
dest: "/etc/pam.d/common-password"
mode: "0644"
when: ansible_os_family == "Debian"
# Password policy is technically not required for boot,
# But it's quite nice to configure it for boot and therefore
# enforce the required policies/configurations wanted for the first passwrod change
tags: ["required_for_boot"]
|
