mirror of
https://github.com/pikami/mail-server.git
synced 2025-02-20 19:25:40 +00:00
36 lines
864 B
YAML
36 lines
864 B
YAML
|
---
|
||
|
|
- name: Apply all available system patches
|
||
|
|
command: syspatch
|
||
|
|
register: syspatch
|
||
|
|
failed_when: syspatch.rc != 0 and syspatch.rc != 2
|
||
|
|
changed_when: syspatch.rc == 0
|
||
|
|
|
||
|
|
- name: Update package list and upgrade all packages
|
||
|
|
command: pkg_add -u
|
||
|
|
|
||
|
|
- name: Install essential packages
|
||
|
|
community.general.openbsd_pkg:
|
||
|
|
name:
|
||
|
|
- nano
|
||
|
|
- curl
|
||
|
|
state: present
|
||
|
|
|
||
|
|
- name: Disable SSH password authentication
|
||
|
|
ansible.builtin.lineinfile:
|
||
|
|
path: /etc/ssh/sshd_config
|
||
|
|
regexp: "^#?PasswordAuthentication"
|
||
|
|
line: "PasswordAuthentication no"
|
||
|
|
state: present
|
||
|
|
register: sshd_config
|
||
|
|
|
||
|
|
- name: Restart SSH service to apply changes
|
||
|
|
ansible.builtin.service:
|
||
|
|
name: sshd
|
||
|
|
state: restarted
|
||
|
|
when: sshd_config.changed
|
||
|
|
|
||
|
|
- name: Add SSH public key to authorized_keys
|
||
|
|
ansible.posix.authorized_key:
|
||
|
|
user: root
|
||
|
|
key: "{{ ssh_public_key }}"
|