From e3d00f0b2c60c04fbd5aee3e124778d40e5eb1b7 Mon Sep 17 00:00:00 2001 From: L3D Date: Tue, 26 Jan 2021 20:11:08 +0100 Subject: [PATCH 1/2] update module --- roles/dotfiles | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/dotfiles b/roles/dotfiles index 17ea901..d51c5a9 160000 --- a/roles/dotfiles +++ b/roles/dotfiles @@ -1 +1 @@ -Subproject commit 17ea9017981ab33f5b1a1fc3663758f0fdb64b32 +Subproject commit d51c5a92307963b012b1dde96fdc376ddf2e248d From 0cc7d592e9e0b5b7966de308d4a8cc413799bb75 Mon Sep 17 00:00:00 2001 From: L3D Date: Wed, 27 Jan 2021 00:53:40 +0100 Subject: [PATCH 2/2] update --- .gitmodules | 3 +++ group_vars/{all.yml => all/vars.yml} | 0 group_vars/all/vault.yml | 7 +++++++ roles/do1jlr.mailserver_preperation | 2 +- roles/gitea | 2 +- roles/unattended_upgrades | 1 + site.yml | 1 + 7 files changed, 14 insertions(+), 2 deletions(-) rename group_vars/{all.yml => all/vars.yml} (100%) create mode 100644 group_vars/all/vault.yml create mode 160000 roles/unattended_upgrades diff --git a/.gitmodules b/.gitmodules index dc2ca04..d7957f2 100644 --- a/.gitmodules +++ b/.gitmodules @@ -73,3 +73,6 @@ [submodule "roles/do1jlr.rspamd"] path = roles/do1jlr.rspamd url = https://github.com/roles-ansible/ansible_role_rspamd.git +[submodule "roles/unattended_upgrades"] + path = roles/unattended_upgrades + url = https://github.com/jnv/ansible-role-unattended-upgrades.git diff --git a/group_vars/all.yml b/group_vars/all/vars.yml similarity index 100% rename from group_vars/all.yml rename to group_vars/all/vars.yml diff --git a/group_vars/all/vault.yml b/group_vars/all/vault.yml new file mode 100644 index 0000000..383cd08 --- /dev/null +++ b/group_vars/all/vault.yml @@ -0,0 +1,7 @@ +$ANSIBLE_VAULT;1.1;AES256 +36663863373338383561336138323362326461643035366564653064343831303331373862373465 +6465396462326630383532376465653965353131623265300a333866303861663238306234326663 +64353530653265333866363938626431326139376136653631626635303430313437333431623637 +3931616565633732320a636166306637383739313666353564646235336332636565363266393961 +63363263626263303535623465633639313865383634323935663363383532336662656662633262 +3537383036623661313530306532376237633132633234613936 diff --git a/roles/do1jlr.mailserver_preperation b/roles/do1jlr.mailserver_preperation index 8e8441a..45cad04 160000 --- a/roles/do1jlr.mailserver_preperation +++ b/roles/do1jlr.mailserver_preperation @@ -1 +1 @@ -Subproject commit 8e8441a576bab17077868ef7cfe81be12fa48246 +Subproject commit 45cad04009b03f11fc901466bf690e42fc16ad19 diff --git a/roles/gitea b/roles/gitea index cde4a96..a216c60 160000 --- a/roles/gitea +++ b/roles/gitea @@ -1 +1 @@ -Subproject commit cde4a964d584670201d2d5aa479da33dcf648eb0 +Subproject commit a216c6093c0d9d6cdbe6e6d4d130d886583c7b59 diff --git a/roles/unattended_upgrades b/roles/unattended_upgrades new file mode 160000 index 0000000..9960a79 --- /dev/null +++ b/roles/unattended_upgrades @@ -0,0 +1 @@ +Subproject commit 9960a79ce0f5530275d674eacd4c5a37d2d5b272 diff --git a/site.yml b/site.yml index ada0d89..3bca949 100644 --- a/site.yml +++ b/site.yml @@ -11,6 +11,7 @@ - { role: base, tags: [default,packages,base]} - { role: ranger, tags: [packages,ranger]} - { role: bat, tags: [packages,bat], when: [ansible_os_family == 'Debian']} + - { role: unattended_upgrades, tags: [default,unattended,unattended_upgrades,security], become: true, when: ansible_distribution == 'Debian'} - name: user specific roles for all hosts hosts: all