playbooks/ansible_playbook_servers
1
0
Fork 0
mirror of https://github.com/DO1JLR/ansible_playbook_servers.git synced 2024-09-14 19:53:56 +02:00
Code Releases Activity

improve yaml linting

Browse source
This commit is contained in:
L3D 2021-01-31 16:50:41 +01:00
parent 31a004b77e
commit 8dbad0934d
Signed by: l3d
GPG key ID: CD08445BFF4313D1
3 changed files with 35 additions and 34 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.github/FUNDING.yml vendored
View file

@ -1,3 +1,4 @@
---
# These are supported funding model platforms
github: [do1jlr]

12
.yamllint
View file

@ -4,11 +4,11 @@ extends: default
rules:
# 150 chars should be enough, but don't fail if a line is longer
line-length:
max: 150
max: 180
level: warning
commas:
max-spaces-before: 0
min-spaces-after: 0
braces:
max-spaces-inside: 1
ignore: |
host_vars/mail01.l3d.space/vault.yml
host_vars/web01.l3d.space/vault.yml
group_vars/all/vault.yml
roles/

56
site.yml
View file

@ -2,48 +2,48 @@
- name: check if ansible is not to old
hosts: localhost
roles:
- { role: do1jlr.ansible_version, tags: [default,version,default,always], gather_facts: false}
- {role: do1jlr.ansible_version, tags: [default, version, default, always], gather_facts: false}
- name: general roles for all hosts
hosts: all
roles:
- { role: base, tags: [default,packages,base]}
- { role: ranger, tags: [packages,ranger]}
- { role: bat, tags: [packages,bat], when: [ansible_os_family == 'Debian']}
- { role: unattended_upgrades, tags: [default,unattended,unattended_upgrades,security], become: true, when: ansible_distribution == 'Debian'}
- {role: base, tags: [default, packages, base]}
- {role: ranger, tags: [packages, ranger]}
- {role: bat, tags: [packages, bat], when: [ansible_os_family == 'Debian']}
- {role: unattended_upgrades, tags: [default, unattended, unattended_upgrades, security], become: true, when: ansible_distribution == 'Debian'}
- name: user specific roles for all hosts
hosts: all
roles:
- { role: users, tags: [default,init,users]}
- { role: dotfiles, tags: [default,dotfiles]}
- { role: ssh_auth, tags: [default,init,users]}
- { role: sshd, tags: [default,init,users]}
- { role: geerlingguy.firewall, tags: [default,firewall], become: true}
- { role: robertdebock.fail2ban, tags: [default,fail2ban], become: true}
- {role: users, tags: [default, init, users]}
- {role: dotfiles, tags: [default, dotfiles]}
- {role: ssh_auth, tags: [default, init, users]}
- {role: sshd, tags: [default, init, users]}
- {role: geerlingguy.firewall, tags: [default, firewall], become: true}
- {role: robertdebock.fail2ban, tags: [default, fail2ban], become: true}
- name: deploy web config
hosts: web
roles:
- { role: webhost2, tags: [web,webhost]}
- { role: acmetool_fix, tags: [web,acmetool]}
- { role: acmetool2, tags: [web,acmetool]}
- { role: nginx2, tags: [web,nginx]}
- { role: geerlingguy.mysql, tags: [web,git,mysql]}
- { role: gitea, tags: [web,gitea,git]}
- { role: goaccess, tags: [web,goaccess]}
- {role: webhost2, tags: [web, webhost]}
- {role: acmetool_fix, tags: [web, acmetool]}
- {role: acmetool2, tags: [web, acmetool]}
- {role: nginx2, tags: [web, nginx]}
- {role: geerlingguy.mysql, tags: [web, git, mysql]}
- {role: gitea, tags: [web, gitea, git]}
- {role: goaccess, tags: [web, goaccess]}
- name: deploy mail config
hosts: mail
roles:
- { role: unbound, tags: [mail,unbound]}
- { role: geerlingguy.mysql, tags: [mail,mysql,mariadb]}
- { role: acmetool_fix, tags: [mail,acmetool]}
- { role: webhost2, tags: [mail,webhost]}
- { role: acmetool2, tags: [mail,acmetool]}
- { role: nginx2, tags: [mail,nginx]}
- { role: do1jlr.mailserver_preperation, tags: [mail,mailserver_preperation,prep,mailserver]}
- { role: do1jlr.dovecot, tags: [mail,dovecot,mailserver_dovecot]}
- { role: postfix, tags: [mail,postfix]}
- { role: do1jlr.rspamd, tags: [mail,rspamd,dcim]}
- {role: unbound, tags: [mail, unbound]}
- {role: geerlingguy.mysql, tags: [mail, mysql, mariadb]}
- {role: acmetool_fix, tags: [mail, acmetool]}
- {role: webhost2, tags: [mail, webhost]}
- {role: acmetool2, tags: [mail, acmetool]}
- {role: nginx2, tags: [mail, nginx]}
- {role: do1jlr.mailserver_preperation, tags: [mail, mailserver_preperation, prep, mailserver]}
- {role: do1jlr.dovecot, tags: [mail, dovecot, mailserver_dovecot]}
- {role: postfix, tags: [mail, postfix]}
- {role: do1jlr.rspamd, tags: [mail, rspamd]}