diff --git a/.gitignore b/.gitignore index ae81d7b..d876c26 100644 --- a/.gitignore +++ b/.gitignore @@ -114,6 +114,7 @@ dmypy.json env/ ansible/.vault_pass ansible/galaxy_roles +ansible/galaxy_collections # Created by https://www.gitignore.io/api/terraform # Edit at https://www.gitignore.io/?templates=terraform diff --git a/ansible/.ansible-lint b/ansible/.ansible-lint index 7fadcd3..202b7da 100644 --- a/ansible/.ansible-lint +++ b/ansible/.ansible-lint @@ -3,3 +3,7 @@ skip_list: - 401 - 301 - 503 + +exclude_paths: + - ansible/galaxy_roles/ + - ansible/galaxy_collections/ diff --git a/ansible/ansible.cfg b/ansible/ansible.cfg index fca6d0b..6ab62d9 100644 --- a/ansible/ansible.cfg +++ b/ansible/ansible.cfg @@ -3,6 +3,7 @@ nocows = 1 host_key_checking = False retry_files_enabled = False roles_path = $PWD/galaxy_roles:$PWD/roles +collections_path = $PWD/galaxy_collections inventory = ./hosts become_ask_pass = True interpreter_python = auto diff --git a/ansible/galaxy-requirements.yml b/ansible/galaxy-requirements.yml index 85da69e..4bfbb87 100644 --- a/ansible/galaxy-requirements.yml +++ b/ansible/galaxy-requirements.yml @@ -1,6 +1,11 @@ -- src: geerlingguy.docker -- src: geerlingguy.ntp -- src: realorangeone.reflector -- src: https://github.com/IronicBadger/ansible-role-proxmox-nag-removal - name: proxmox-nag-removal -- src: chmduquesne.iptables_persistent +collections: + - ansible.posix + - community.general + +roles: + - src: geerlingguy.docker + - src: geerlingguy.ntp + - src: realorangeone.reflector + - src: https://github.com/IronicBadger/ansible-role-proxmox-nag-removal + name: proxmox-nag-removal + - src: chmduquesne.iptables_persistent diff --git a/ansible/roles/base/tasks/ssh.yml b/ansible/roles/base/tasks/ssh.yml index 72b08d9..e284c1d 100644 --- a/ansible/roles/base/tasks/ssh.yml +++ b/ansible/roles/base/tasks/ssh.yml @@ -26,7 +26,7 @@ register: sshd_config - name: Set up authorized keys - authorized_key: + ansible.posix.authorized_key: user: "{{ user }}" state: present key: "{{ lookup('file', item) }}" diff --git a/ansible/yamllint.yml b/ansible/yamllint.yml index 123d4b1..d2cb1ef 100644 --- a/ansible/yamllint.yml +++ b/ansible/yamllint.yml @@ -2,6 +2,7 @@ extends: default ignore: | ansible/galaxy_roles + ansible/galaxy_collections ansible/group_vars/all/hosts.yml ansible/roles/traefik/files/traefik.yml ansible/roles/nebula/files/nebula.yml diff --git a/scripts/ansible/deploy.sh b/scripts/ansible/deploy.sh index 09e9b3a..fed0067 100755 --- a/scripts/ansible/deploy.sh +++ b/scripts/ansible/deploy.sh @@ -1,10 +1,6 @@ #!/usr/bin/env bash -set -e - -PATH=${PWD}/env/bin:${PATH} - -set -x +set -ex cd ansible/ diff --git a/scripts/ansible/lint.sh b/scripts/ansible/lint.sh index 64a9dc5..ebfe14e 100755 --- a/scripts/ansible/lint.sh +++ b/scripts/ansible/lint.sh @@ -8,6 +8,6 @@ set -x yamllint -sc ansible/yamllint.yml ansible/ -ansible-lint ansible/main.yml -p -c ansible/.ansible-lint --exclude ansible/galaxy_roles/ +ansible-lint ansible/main.yml -p -c ansible/.ansible-lint cd ansible/ && ansible-playbook main.yml --syntax-check