prevent SMTP smuggling

[ansible.git] / roles / base / tasks / main.yml

diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index d1c108c9a5f28ef50c235ee989686bb1e9e662b2..4b4e4cd42117cf22160cfc9be3e967de2a60c7ba 100644 (file)
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -11,11 +11,9 @@
   when: backports.rc != 0
   apt_repository: repo='deb http://httpredir.debian.org/debian {{ansible_distribution_release}}-backports main contrib non-free' state=present update_cache=yes
 - name: get rid of packages we do not want
-  apt: name=exim4-base,rpcbind state=absent autoremove=yes
-- name: install needrestart (from backports)
-  apt: name=needrestart state=latest default_release={{ansible_distribution_release}}-backports
+  apt: name=exim4-base,rpcbind,procmail,fetchmail state=absent autoremove=yes
 - name: install some basic tools
-  apt: name=aptitude,rsync,git,mercurial,curl,apt-transport-https,psmisc,dnsutils,tree,htop,acl state=latest
+  apt: name=nano,aptitude,rsync,git,mercurial,curl,apt-transport-https,psmisc,dnsutils,tree,htop,acl,libpam-systemd,needrestart,reboot-notifier,debian-security-support state=latest
 # configuration
 - name: configure root shell
   copy:
@@ -31,3 +29,7 @@
     dest: /etc/systemd/timesyncd.conf
     src: files/timesyncd.conf
   notify: timesyncd
+- name: configure needrestart
+  copy:
+    dest: /etc/needrestart/conf.d/restart.conf
+    src: files/needrestart.conf