systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 21 Activity Actions

Remove reference to become_user: root

Browse source 
This was the default anyway
This commit is contained in:
Jake Howard 2020-03-17 21:11:02 +00:00
parent 236757b4c0
commit 7eda50239c
Signed by: jake
GPG key ID: 57AFB45680EDD477
28 changed files with 0 additions and 79 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
ansible/roles/base/tasks/packages.yml
View file

@ -2,7 +2,6 @@
apt:
name: "{{ item }}"
become: true
become_user: root
loop:
- htop
- neofetch

2
ansible/roles/docker/tasks/calibre.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install calibre compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle calibre container
docker_compose:

2
ansible/roles/docker/tasks/duplicati.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install duplicati compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle duplicati container
docker_compose:

2
ansible/roles/docker/tasks/emby.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install emby compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle emby container
docker_compose:

2
ansible/roles/docker/tasks/folding-at-home.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install foh compose file
template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle foh container
docker_compose:

7
ansible/roles/docker/tasks/gitea.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Create gitea config directory
file:
@ -16,7 +15,6 @@
state: directory
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Create cgit config directory
file:
@ -24,7 +22,6 @@
state: directory
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install gitea compose file
template:
@ -35,7 +32,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Install gitea config file
template:
@ -45,7 +41,6 @@
owner: "{{ docker_user.name }}"
register: gitea_config_file
become: true
become_user: root
- name: Install cgit config file
template:
@ -55,14 +50,12 @@
owner: "{{ docker_user.name }}"
register: cgit_config_file
become: true
become_user: root
- name: Touch public repos file
file:
path: /opt/gitea/cgit/repos.txt
state: file
become: true
become_user: root
- name: Cycle gitea container
docker_compose:

2
ansible/roles/docker/tasks/gotify.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install gotify compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle gotify container
docker_compose:

2
ansible/roles/docker/tasks/librespeed.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install librespeed compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle librespeed container
docker_compose:

2
ansible/roles/docker/tasks/netdata.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install netdata compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle netdata container
docker_compose:

5
ansible/roles/docker/tasks/nextcloud.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install nextcloud compose file
template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Create nextcloud config directory
file:
@ -27,7 +25,6 @@
state: directory
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install nextcloud config
template:
@ -37,7 +34,6 @@
owner: "{{ docker_user.name }}"
register: config_file
become: true
become_user: root
- name: Install nextcloud custom nginx config
template:
@ -47,7 +43,6 @@
owner: "{{ docker_user.name }}"
register: nginx_config
become: true
become_user: root
- name: Cycle nextcloud container
docker_compose:

4
ansible/roles/docker/tasks/pihole.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install pihole compose file
template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Create dnsmasq directory
file:
@ -27,7 +25,6 @@
state: directory
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install dnsmasq hosts config
template:
@ -37,7 +34,6 @@
owner: "{{ docker_user.name }}"
register: dnsmasq_vpn_hosts
become: true
become_user: root
- name: Cycle pihole container
docker_compose:

2
ansible/roles/docker/tasks/portainer.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install portainer compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle portainer container
docker_compose:

2
ansible/roles/docker/tasks/quassel.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install quassel compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle quassel container
docker_compose:

1
ansible/roles/docker/tasks/setup-docker.yml
View file

@ -2,7 +2,6 @@
apt:
name: "docker-compose"
become: true
become_user: root
- name: Create docker user
user:

2
ansible/roles/docker/tasks/statping.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install statping compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle statping container
docker_compose:

3
ansible/roles/docker/tasks/synapse.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install synapse compose file
template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Install synapse config
template:
@ -29,7 +27,6 @@
owner: "{{ docker_user.name }}"
register: homeserver_config
become: true
become_user: root
- name: Cycle synapse container
docker_compose:

2
ansible/roles/docker/tasks/todoist-github.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install todoist-github compose file
template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle todoist-github container
docker_compose:

2
ansible/roles/docker/tasks/torrent.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install torrent compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle torrent container
docker_compose:

5
ansible/roles/docker/tasks/traefik.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Create traefik config directory
file:
@ -13,7 +12,6 @@
state: directory
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install traefik compose file
template:
@ -24,7 +22,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Install traefik config
template:
@ -34,7 +31,6 @@
owner: "{{ docker_user.name }}"
register: config_file
become: true
become_user: root
- name: Install traefik file provider
template:
@ -44,7 +40,6 @@
owner: "{{ docker_user.name }}"
register: file_provider
become: true
become_user: root
- name: Cycle traefik container
docker_compose:

4
ansible/roles/docker/tasks/tt-rss.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install tt-rss compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Create tt-rss config directory
file:
@ -24,7 +22,6 @@
state: directory
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install tt-rss config
template:
@ -34,7 +31,6 @@
owner: "{{ docker_user.name }}"
register: config_file
become: true
become_user: root
- name: Cycle tt-rss container
docker_compose:

2
ansible/roles/docker/tasks/wallabag.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install wallabag compose file
template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle wallabag container
docker_compose:

2
ansible/roles/docker/tasks/watchtower.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install watchtower compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle watchtower container
docker_compose:

2
ansible/roles/docker/tasks/whoami.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install whoami compose file
template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Cycle whoami container
docker_compose:

3
ansible/roles/docker/tasks/yourls.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}"
become: true
become_user: root
- name: Install yourls compose file
template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config
register: compose_file
become: true
become_user: root
- name: Install yourls index
template:
@ -28,7 +26,6 @@
mode: "{{ docker_compose_file_mask }}"
register: config_file
become: true
become_user: root
- name: Cycle yourls container
docker_compose:

4
ansible/roles/gateway/tasks/fail2ban.yml
View file

@ -2,14 +2,12 @@
apt:
name: fail2ban
become: true
become_user: root
- name: fail2ban filter
template:
src: files/haproxy-fail2ban-filter.conf
dest: /etc/fail2ban/filter.d/haproxy-basic.conf
become: true
become_user: root
register: fail2ban_filter
- name: fail2ban jail
@ -17,7 +15,6 @@
src: files/haproxy-fail2ban-jail.conf
dest: /etc/fail2ban/jail.d/haproxy.conf
become: true
become_user: root
register: fail2ban_jail
- name: Restart fail2ban
@ -25,5 +22,4 @@
name: haproxy
state: restarted
become: true
become_user: root
when: fail2ban_filter.changed or fail2ban_jail.changed

3
ansible/roles/gateway/tasks/haproxy.yml
View file

@ -2,7 +2,6 @@
apt:
name: haproxy
become: true
become_user: root
- name: Haproxy config
template:
@ -11,7 +10,6 @@
validate: /usr/sbin/haproxy -c -- %s
backup: yes
become: true
become_user: root
register: haproxy_config
- name: Restart Haproxy
@ -19,5 +17,4 @@
name: haproxy
state: restarted
become: true
become_user: root
when: haproxy_config.changed

6
ansible/roles/gateway/tasks/wireguard.yml
View file

@ -5,21 +5,18 @@
line: 'deb http://deb.debian.org/debian/ unstable main'
register: install_unstable_apt
become: true
become_user: root
- name: Limit unstable apt repo
copy:
src: limit-unstable.conf
dest: /etc/apt/preferences.d/limit-unstable
become: true
become_user: root
register: limit_unstable_apt
- name: Update apt repos
apt:
update_cache: true
become: true
become_user: root
when: install_unstable_apt.changed or limit_unstable_apt.changed
- name: Install Wireguard
@ -28,7 +25,6 @@
- wireguard
- wireguard-tools
become: true
become_user: root
- name: Wireguard server config
template:
@ -36,7 +32,6 @@
dest: /etc/wireguard/wg0.conf
backup: yes
become: true
become_user: root
register: wireguard_conf
- name: Enable wireguard
@ -46,7 +41,6 @@
enabled: true
when: wireguard_conf.changed
become: true
become_user: root
- name: Create wireguard client directory
file:

3
ansible/roles/ssh/tasks/main.yml
View file

@ -2,7 +2,6 @@
apt:
name: openssh-server
become: true
become_user: root
- name: Define context
set_fact:
@ -16,7 +15,6 @@
validate: /usr/sbin/sshd -t -f %s
backup: yes
become: true
become_user: root
register: sshd_config
- name: Restart SSH config
@ -25,4 +23,3 @@
state: reloaded
when: sshd_config.changed
become: true
become_user: root