From 99ef7828bf02683cddd37931898a03d2a04afd46 Mon Sep 17 00:00:00 2001 From: iRaven4522 Date: Sun, 30 Nov 2025 18:45:39 -0600 Subject: [PATCH] compliance - OS specific tasks more defined --- linux/compliance_Alpine.yaml | 6 +++--- linux/compliance_Debian.yaml | 14 +++++++------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/linux/compliance_Alpine.yaml b/linux/compliance_Alpine.yaml index bf01ef0..4c497c0 100644 --- a/linux/compliance_Alpine.yaml +++ b/linux/compliance_Alpine.yaml @@ -1,7 +1,7 @@ --- ## Checks/deploys an Alpine Linux system to be managed with Ansible. -- name: Install standard packages if not already installed. +- name: Alpine - Install standard packages if not already installed. # Looking at you LXCs. >.> ansible.builtin.package: name: @@ -15,7 +15,7 @@ state: present # Give ansible doas rights with no password required. -- name: Add doas rights with no password for deployment user +- name: Alpine - Add doas rights with no password for deployment user lineinfile: dest: /etc/doas.conf regexp: '^ansible' @@ -23,7 +23,7 @@ state: present validate: 'doas -C %s' -- name: Add nhadmin to wheel group. +- name: Alpine - Add nhadmin to wheel group. user: name: nhadmin groups: wheel diff --git a/linux/compliance_Debian.yaml b/linux/compliance_Debian.yaml index 1a2e60f..3b89587 100644 --- a/linux/compliance_Debian.yaml +++ b/linux/compliance_Debian.yaml @@ -2,7 +2,7 @@ ## Checks/deploys a Debian Linux system to be managed with Ansible. # Add sudo package -- name: Install sudo if not already installed. +- name: Debian - Install sudo if not already installed. # Looking at you LXCs. >.> ansible.builtin.package: name: @@ -10,7 +10,7 @@ state: present # APT Cacher-NG Configuration -- name: Add APT-Cacher-NG Configuration +- name: Debian - Add APT-Cacher-NG Configuration copy: content: "{{ aptcacher_config }}" dest: /etc/apt/apt.conf.d/proxy @@ -20,11 +20,11 @@ state: absent # Update apt package lists after adding our proxy -- name: Update apt repo package lists from cacher +- name: Debian - Update apt repo package lists from cacher apt: update_cache=yes force_apt_get=yes cache_valid_time=3600 # Add required packages because Debian is lame -- name: Install standard packages if not already installed. +- name: Debian - Install standard packages if not already installed. ansible.builtin.package: name: - curl @@ -35,7 +35,7 @@ state: present # Give ansible sudo rights with no password required. -- name: Add sudo rights with no password for deployment user. +- name: Debian - Add sudo rights with no password for deployment user. lineinfile: dest: /etc/sudoers regexp: '^ansible' @@ -43,14 +43,14 @@ state: present validate: 'visudo -cf %s' -- name: Add nhadmin to sudo group. +- name: Debian - Add nhadmin to sudo group. user: name: nhadmin groups: sudo append: yes # when: "'sudo' in ansible_facts.getent_group" -- name: Add nhadmin to systemd-journal group. +- name: Debian - Add nhadmin to systemd-journal group. user: name: nhadmin groups: systemd-journal