mirror of
https://github.com/fscotto/infra.git
synced 2026-05-31 07:49:57 +00:00
Add server profile directory setup
This commit is contained in:
@@ -34,6 +34,36 @@ server_templates:
|
|||||||
dest: .gitconfig
|
dest: .gitconfig
|
||||||
mode: "0644"
|
mode: "0644"
|
||||||
|
|
||||||
|
server_directories:
|
||||||
|
- path: /opt/navidrome/data
|
||||||
|
owner: "{{ server_username }}"
|
||||||
|
group: "{{ server_user_group }}"
|
||||||
|
mode: "0755"
|
||||||
|
- path: /opt/music
|
||||||
|
owner: "{{ server_username }}"
|
||||||
|
group: "{{ server_user_group }}"
|
||||||
|
mode: "0755"
|
||||||
|
- path: /opt/npm/data
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: "0755"
|
||||||
|
- path: /opt/npm/letsencrypt
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: "0755"
|
||||||
|
- path: /opt/postgres/data
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: "0755"
|
||||||
|
- path: /opt/gitea/data
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
mode: "0755"
|
||||||
|
- path: /home/git/.ssh
|
||||||
|
owner: git
|
||||||
|
group: git
|
||||||
|
mode: "0700"
|
||||||
|
|
||||||
server_ufw_rules:
|
server_ufw_rules:
|
||||||
- rule: allow
|
- rule: allow
|
||||||
name: OpenSSH
|
name: OpenSSH
|
||||||
|
|||||||
@@ -24,6 +24,18 @@
|
|||||||
loop_control:
|
loop_control:
|
||||||
label: "{{ item.dest }}"
|
label: "{{ item.dest }}"
|
||||||
|
|
||||||
|
- name: Ensure server directories exist
|
||||||
|
tags: [dotfiles, services]
|
||||||
|
ansible.builtin.file:
|
||||||
|
path: "{{ item.path }}"
|
||||||
|
state: directory
|
||||||
|
owner: "{{ item.owner }}"
|
||||||
|
group: "{{ item.group }}"
|
||||||
|
mode: "{{ item.mode }}"
|
||||||
|
loop: "{{ server_directories | default([]) }}"
|
||||||
|
loop_control:
|
||||||
|
label: "{{ item.path }}"
|
||||||
|
|
||||||
- name: Disable SSH root login on server
|
- name: Disable SSH root login on server
|
||||||
tags: [services]
|
tags: [services]
|
||||||
ansible.builtin.lineinfile:
|
ansible.builtin.lineinfile:
|
||||||
|
|||||||
Reference in New Issue
Block a user