diff --git a/README.md b/README.md index e8702f4..e09f5fe 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ ### runnning against default hosts ```shell script -ansible-playbook --ask-become-pass system-upgrade.yml +ansible-playbook --ask-become-pass bootstrap.yml ``` diff --git a/bootstrap.yml b/bootstrap.yml new file mode 100644 index 0000000..0e33f2d --- /dev/null +++ b/bootstrap.yml @@ -0,0 +1,36 @@ +--- + +- hosts: all + become: true + + pre_tasks: + - name: update respository index + tags: always + ansible.builtin.apt: + update_cache: true + + +- hosts: all + become: true + + tasks: + - name: create ansible user with group + tags: always + ansible.builtin.user: + name: ansible + group: ansible + + - name: add ssh key for ansible + tags: always + ansible.builtin.authorized_key: + user: ansible + key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOclevKIKKnVEgkVXjszax/bTfaBT9yNNfy2in2ZZoyU ansible" + + - name: add sudoers file for ansible + tags: always + ansible.builtin.copy: + src: sudoer_ansible + dest: /etc/sudoers.d/ansible + owner: root + group: root + mode: 0440 \ No newline at end of file diff --git a/files/sudoer_ansible b/files/sudoer_ansible new file mode 100644 index 0000000..dccc3f4 --- /dev/null +++ b/files/sudoer_ansible @@ -0,0 +1 @@ +ansible ALL=(ALL) NOPASSWD:ALL \ No newline at end of file diff --git a/inventory b/inventory index e1421f6..f2ed031 100644 --- a/inventory +++ b/inventory @@ -8,6 +8,11 @@ jenkins gitea pihole +[pve] +proxmox +[pve:vars] +ansible_user=root + [vm] microk8s nginx