Add Rocky 9 Atlas NAS profile

ansible/roles/profile_atlas/templates/00-atlas-hardening.conf.j2

@@ -0,0 +1,6 @@
+# Managed by Ansible. Do not edit manually.
+PermitRootLogin no
+PubkeyAuthentication yes
+PasswordAuthentication no
+KbdInteractiveAuthentication no
+AllowUsers {{ atlas_admin_username }}

ansible/roles/profile_atlas/templates/atlas-nfs.conf.j2

@@ -0,0 +1,3 @@
+# Managed by Ansible. Do not edit manually.
+[nfsd]
+vers3 = n

ansible/roles/profile_atlas/templates/atlas-syncthing.service.j2

@@ -0,0 +1,16 @@
+[Unit]
+Description=Atlas Syncthing service
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+User={{ atlas_admin_username }}
+Group={{ atlas_admin_group }}
+WorkingDirectory={{ atlas_syncthing_mountpoint }}
+Environment=HOME={{ atlas_syncthing_mountpoint }}
+ExecStart=/usr/local/bin/syncthing serve --no-browser --no-restart --no-upgrade --home={{ atlas_syncthing_config_dir }}
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target

ansible/roles/profile_atlas/templates/atlas.exports.j2

@@ -0,0 +1,4 @@
+# Managed by Ansible. Do not edit manually.
+{% for export in atlas_nfs_exports %}
+{{ export.path }} {{ export.clients }}
+{% endfor %}

ansible/roles/profile_atlas/templates/nfs-mountd-v4only.conf.j2

@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=/usr/sbin/rpc.mountd --no-tcp --no-udp

ansible/roles/profile_atlas/templates/smb.conf.j2

@@ -0,0 +1,16 @@
+# Managed by Ansible. Do not edit manually.
+[global]
+  workgroup = {{ atlas_samba_workgroup }}
+  security = user
+  map to guest = Never
+  server min protocol = SMB2
+  include = registry
+
+[{{ atlas_samba_share_name }}]
+  path = {{ atlas_work_mountpoint }}
+  browseable = yes
+  read only = no
+  valid users = {{ atlas_samba_valid_users | join(' ') }}
+  force group = {{ atlas_admin_group }}
+  create mask = 0660
+  directory mask = 0770