I don't think we still need this with PW-logins disabled

[ansible.git] / base.yml

diff --git a/base.yml b/base.yml
index 7f03b5b040f519b809d2c86517078097108b340f..e43f77a58a2cc8e0586cd865d4733ec0112788ba 100644 (file)
--- a/base.yml
+++ b/base.yml
@@ -2,19 +2,36 @@
 - hosts: all
   tasks:
   # packages
+  - name: check minimal system version
+    when: not (ansible_distribution == "Debian" and ansible_lsb.major_release|int >= 9)
+    command: "false"
   - name: detect if we have backports in the sources.list
     command: fgrep backports /etc/apt/sources.list
     register: backports
     failed_when: backports.rc == 2
+    changed_when: False
   - name: add backports repository
-    apt_repository: repo='deb http://httpredir.debian.org/debian {{ansible_distribution_release}}-backports main contrib non-free' state=present update_cache=yes
     when: backports.rc != 0
+    apt_repository: repo='deb http://httpredir.debian.org/debian {{ansible_distribution_release}}-backports main contrib non-free' state=present update_cache=yes
   - name: get rid of packages we do not want
     apt: name=exim4-base,rpcbind state=absent autoremove=yes
-  - name: install latest version of some packages, coming from backports if possible
-    apt: name=needrestart,git state=latest default_release={{ansible_distribution_release}}-backports
+  - name: install needrestart (from backports)
+    apt: name=needrestart state=latest default_release={{ansible_distribution_release}}-backports
+  - name: install some basic tools
+    apt: name=aptitude,rsync,git,mercurial,curl,apt-transport-https,psmisc,dnsutils,tree,htop state=latest
   # server-scripts
   - name: clone server-scripts git repository
     git:
-      repo: 'git://ralfj.de/server-scripts'
       dest: /root/server-scripts
+      repo: 'git://ralfj.de/server-scripts'
+      version: 07d301fd8adeaf8ad40591a418da394ad37816ce
+  # configuration
+  - name: configure root shell
+    copy:
+      dest: /root/{{ item }}
+      remote_src: True
+      src: /etc/skel/{{ item }}
+    loop:
+    - .profile
+    - .bashrc
+    - .bash_logout