systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 17 Activity Actions

Remove reference to become_user: root

Browse source 
This was the default anyway
This commit is contained in:
Jake Howard 2020-03-17 21:11:02 +00:00
parent 236757b4c0
commit 7eda50239c
Signed by: jake
GPG key ID: 57AFB45680EDD477
28 changed files with 0 additions and 79 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
ansible/roles/base/tasks/packages.yml
View file

@ -2,7 +2,6 @@
apt: apt:
name: "{{ item }}" name: "{{ item }}"
become: true become: true
become_user: root
loop: loop:
- htop - htop
- neofetch - neofetch

2
ansible/roles/docker/tasks/calibre.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install calibre compose file - name: Install calibre compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle calibre container - name: Cycle calibre container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/duplicati.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install duplicati compose file - name: Install duplicati compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle duplicati container - name: Cycle duplicati container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/emby.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install emby compose file - name: Install emby compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle emby container - name: Cycle emby container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/folding-at-home.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install foh compose file - name: Install foh compose file
template: template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle foh container - name: Cycle foh container
docker_compose: docker_compose:

7
ansible/roles/docker/tasks/gitea.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Create gitea config directory - name: Create gitea config directory
file: file:
@ -16,7 +15,6 @@
state: directory state: directory
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Create cgit config directory - name: Create cgit config directory
file: file:
@ -24,7 +22,6 @@
state: directory state: directory
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install gitea compose file - name: Install gitea compose file
template: template:
@ -35,7 +32,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Install gitea config file - name: Install gitea config file
template: template:
@ -45,7 +41,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
register: gitea_config_file register: gitea_config_file
become: true become: true
become_user: root
- name: Install cgit config file - name: Install cgit config file
template: template:
@ -55,14 +50,12 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
register: cgit_config_file register: cgit_config_file
become: true become: true
become_user: root
- name: Touch public repos file - name: Touch public repos file
file: file:
path: /opt/gitea/cgit/repos.txt path: /opt/gitea/cgit/repos.txt
state: file state: file
become: true become: true
become_user: root
- name: Cycle gitea container - name: Cycle gitea container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/gotify.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install gotify compose file - name: Install gotify compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle gotify container - name: Cycle gotify container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/librespeed.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install librespeed compose file - name: Install librespeed compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle librespeed container - name: Cycle librespeed container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/netdata.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install netdata compose file - name: Install netdata compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle netdata container - name: Cycle netdata container
docker_compose: docker_compose:

5
ansible/roles/docker/tasks/nextcloud.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install nextcloud compose file - name: Install nextcloud compose file
template: template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Create nextcloud config directory - name: Create nextcloud config directory
file: file:
@ -27,7 +25,6 @@
state: directory state: directory
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install nextcloud config - name: Install nextcloud config
template: template:
@ -37,7 +34,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
register: config_file register: config_file
become: true become: true
become_user: root
- name: Install nextcloud custom nginx config - name: Install nextcloud custom nginx config
template: template:
@ -47,7 +43,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
register: nginx_config register: nginx_config
become: true become: true
become_user: root
- name: Cycle nextcloud container - name: Cycle nextcloud container
docker_compose: docker_compose:

4
ansible/roles/docker/tasks/pihole.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install pihole compose file - name: Install pihole compose file
template: template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Create dnsmasq directory - name: Create dnsmasq directory
file: file:
@ -27,7 +25,6 @@
state: directory state: directory
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install dnsmasq hosts config - name: Install dnsmasq hosts config
template: template:
@ -37,7 +34,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
register: dnsmasq_vpn_hosts register: dnsmasq_vpn_hosts
become: true become: true
become_user: root
- name: Cycle pihole container - name: Cycle pihole container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/portainer.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install portainer compose file - name: Install portainer compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle portainer container - name: Cycle portainer container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/quassel.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install quassel compose file - name: Install quassel compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle quassel container - name: Cycle quassel container
docker_compose: docker_compose:

1
ansible/roles/docker/tasks/setup-docker.yml
View file

@ -2,7 +2,6 @@
apt: apt:
name: "docker-compose" name: "docker-compose"
become: true become: true
become_user: root
- name: Create docker user - name: Create docker user
user: user:

2
ansible/roles/docker/tasks/statping.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install statping compose file - name: Install statping compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle statping container - name: Cycle statping container
docker_compose: docker_compose:

3
ansible/roles/docker/tasks/synapse.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install synapse compose file - name: Install synapse compose file
template: template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Install synapse config - name: Install synapse config
template: template:
@ -29,7 +27,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
register: homeserver_config register: homeserver_config
become: true become: true
become_user: root
- name: Cycle synapse container - name: Cycle synapse container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/todoist-github.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install todoist-github compose file - name: Install todoist-github compose file
template: template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle todoist-github container - name: Cycle todoist-github container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/torrent.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install torrent compose file - name: Install torrent compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle torrent container - name: Cycle torrent container
docker_compose: docker_compose:

5
ansible/roles/docker/tasks/traefik.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Create traefik config directory - name: Create traefik config directory
file: file:
@ -13,7 +12,6 @@
state: directory state: directory
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install traefik compose file - name: Install traefik compose file
template: template:
@ -24,7 +22,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Install traefik config - name: Install traefik config
template: template:
@ -34,7 +31,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
register: config_file register: config_file
become: true become: true
become_user: root
- name: Install traefik file provider - name: Install traefik file provider
template: template:
@ -44,7 +40,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
register: file_provider register: file_provider
become: true become: true
become_user: root
- name: Cycle traefik container - name: Cycle traefik container
docker_compose: docker_compose:

4
ansible/roles/docker/tasks/tt-rss.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install tt-rss compose file - name: Install tt-rss compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Create tt-rss config directory - name: Create tt-rss config directory
file: file:
@ -24,7 +22,6 @@
state: directory state: directory
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install tt-rss config - name: Install tt-rss config
template: template:
@ -34,7 +31,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
register: config_file register: config_file
become: true become: true
become_user: root
- name: Cycle tt-rss container - name: Cycle tt-rss container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/wallabag.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install wallabag compose file - name: Install wallabag compose file
template: template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle wallabag container - name: Cycle wallabag container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/watchtower.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install watchtower compose file - name: Install watchtower compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle watchtower container - name: Cycle watchtower container
docker_compose: docker_compose:

2
ansible/roles/docker/tasks/whoami.yml
View file

@ -5,7 +5,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install whoami compose file - name: Install whoami compose file
template: template:
@ -16,7 +15,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Cycle whoami container - name: Cycle whoami container
docker_compose: docker_compose:

3
ansible/roles/docker/tasks/yourls.yml
View file

@ -8,7 +8,6 @@
owner: "{{ docker_user.name }}" owner: "{{ docker_user.name }}"
mode: "{{ docker_compose_directory_mask }}" mode: "{{ docker_compose_directory_mask }}"
become: true become: true
become_user: root
- name: Install yourls compose file - name: Install yourls compose file
template: template:
@ -19,7 +18,6 @@
validate: /usr/bin/docker-compose -f %s config validate: /usr/bin/docker-compose -f %s config
register: compose_file register: compose_file
become: true become: true
become_user: root
- name: Install yourls index - name: Install yourls index
template: template:
@ -28,7 +26,6 @@
mode: "{{ docker_compose_file_mask }}" mode: "{{ docker_compose_file_mask }}"
register: config_file register: config_file
become: true become: true
become_user: root
- name: Cycle yourls container - name: Cycle yourls container
docker_compose: docker_compose:

4
ansible/roles/gateway/tasks/fail2ban.yml
View file

@ -2,14 +2,12 @@
apt: apt:
name: fail2ban name: fail2ban
become: true become: true
become_user: root
- name: fail2ban filter - name: fail2ban filter
template: template:
src: files/haproxy-fail2ban-filter.conf src: files/haproxy-fail2ban-filter.conf
dest: /etc/fail2ban/filter.d/haproxy-basic.conf dest: /etc/fail2ban/filter.d/haproxy-basic.conf
become: true become: true
become_user: root
register: fail2ban_filter register: fail2ban_filter
- name: fail2ban jail - name: fail2ban jail
@ -17,7 +15,6 @@
src: files/haproxy-fail2ban-jail.conf src: files/haproxy-fail2ban-jail.conf
dest: /etc/fail2ban/jail.d/haproxy.conf dest: /etc/fail2ban/jail.d/haproxy.conf
become: true become: true
become_user: root
register: fail2ban_jail register: fail2ban_jail
- name: Restart fail2ban - name: Restart fail2ban
@ -25,5 +22,4 @@
name: haproxy name: haproxy
state: restarted state: restarted
become: true become: true
become_user: root
when: fail2ban_filter.changed or fail2ban_jail.changed when: fail2ban_filter.changed or fail2ban_jail.changed

3
ansible/roles/gateway/tasks/haproxy.yml
View file

@ -2,7 +2,6 @@
apt: apt:
name: haproxy name: haproxy
become: true become: true
become_user: root
- name: Haproxy config - name: Haproxy config
template: template:
@ -11,7 +10,6 @@
validate: /usr/sbin/haproxy -c -- %s validate: /usr/sbin/haproxy -c -- %s
backup: yes backup: yes
become: true become: true
become_user: root
register: haproxy_config register: haproxy_config
- name: Restart Haproxy - name: Restart Haproxy
@ -19,5 +17,4 @@
name: haproxy name: haproxy
state: restarted state: restarted
become: true become: true
become_user: root
when: haproxy_config.changed when: haproxy_config.changed

6
ansible/roles/gateway/tasks/wireguard.yml
View file

@ -5,21 +5,18 @@
line: 'deb http://deb.debian.org/debian/ unstable main' line: 'deb http://deb.debian.org/debian/ unstable main'
register: install_unstable_apt register: install_unstable_apt
become: true become: true
become_user: root
- name: Limit unstable apt repo - name: Limit unstable apt repo
copy: copy:
src: limit-unstable.conf src: limit-unstable.conf
dest: /etc/apt/preferences.d/limit-unstable dest: /etc/apt/preferences.d/limit-unstable
become: true become: true
become_user: root
register: limit_unstable_apt register: limit_unstable_apt
- name: Update apt repos - name: Update apt repos
apt: apt:
update_cache: true update_cache: true
become: true become: true
become_user: root
when: install_unstable_apt.changed or limit_unstable_apt.changed when: install_unstable_apt.changed or limit_unstable_apt.changed
- name: Install Wireguard - name: Install Wireguard
@ -28,7 +25,6 @@
- wireguard - wireguard
- wireguard-tools - wireguard-tools
become: true become: true
become_user: root
- name: Wireguard server config - name: Wireguard server config
template: template:
@ -36,7 +32,6 @@
dest: /etc/wireguard/wg0.conf dest: /etc/wireguard/wg0.conf
backup: yes backup: yes
become: true become: true
become_user: root
register: wireguard_conf register: wireguard_conf
- name: Enable wireguard - name: Enable wireguard
@ -46,7 +41,6 @@
enabled: true enabled: true
when: wireguard_conf.changed when: wireguard_conf.changed
become: true become: true
become_user: root
- name: Create wireguard client directory - name: Create wireguard client directory
file: file:

3
ansible/roles/ssh/tasks/main.yml
View file

@ -2,7 +2,6 @@
apt: apt:
name: openssh-server name: openssh-server
become: true become: true
become_user: root
- name: Define context - name: Define context
set_fact: set_fact:
@ -16,7 +15,6 @@
validate: /usr/sbin/sshd -t -f %s validate: /usr/sbin/sshd -t -f %s
backup: yes backup: yes
become: true become: true
become_user: root
register: sshd_config register: sshd_config
- name: Restart SSH config - name: Restart SSH config
@ -25,4 +23,3 @@
state: reloaded state: reloaded
when: sshd_config.changed when: sshd_config.changed
become: true become: true
become_user: root