145 lines
3.6 KiB
YAML
145 lines
3.6 KiB
YAML
---
|
|
# This playbook contains plays that will run on all nodes
|
|
|
|
- name: Update apt
|
|
apt: update_cache=yes
|
|
|
|
- name: Upgrade APT to the lastest packages
|
|
apt: upgrade=safe
|
|
|
|
- name: Install htop
|
|
apt: name=htop state=present
|
|
|
|
- name: Install curl
|
|
apt: name=curl state=present
|
|
|
|
- name: Install openssh-server
|
|
apt: name=openssh-server state=present
|
|
|
|
- name: Install git
|
|
apt: name=git state=present
|
|
|
|
- name: Install rsync
|
|
apt: name=rsync state=present
|
|
|
|
- name: Install zip
|
|
apt: name=zip state=present
|
|
|
|
- name: Install unzip
|
|
apt: name=unzip state=present
|
|
|
|
- name: Install fail2ban
|
|
apt: name=fail2ban state=present
|
|
|
|
- name: Install ntp
|
|
apt: name=ntp state=present
|
|
|
|
- name: Install mysql-client
|
|
apt: name=mysql-client state=present
|
|
|
|
- name: Install wget
|
|
apt: name=wget state=present
|
|
|
|
- name: Set git username
|
|
shell: git config --global user.name "Jacob Cody Wimer"
|
|
|
|
- name: Set git email
|
|
shell: git config --global user.email "jacob.wimer@gmail.com"
|
|
|
|
- name: Is docker installed
|
|
shell: which docker
|
|
register: docker_installed
|
|
|
|
- name: Get docker
|
|
shell: curl -sSL https://get.docker.com/ | sh
|
|
when: docker_install is none
|
|
|
|
- name: Get docker compose
|
|
shell: curl -L https://github.com/docker/compose/releases/download/1.5.0/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose
|
|
when: docker_install is none
|
|
|
|
- name: Link docker compose
|
|
shell: chmod +x /usr/local/bin/docker-compose
|
|
when: docker_install is none
|
|
|
|
- name: Set timezone to NewYork
|
|
shell: timedatectl set-timezone America/New_York
|
|
|
|
- name: Is heroku installed
|
|
shell: which heroku
|
|
register: heroku_installed
|
|
|
|
- name: Install heroku toolbelt
|
|
shell: wget -O- https://toolbelt.heroku.com/install-ubuntu.sh | sh
|
|
when: heroku_installed is none
|
|
|
|
- name: Does the update script exist
|
|
stat: path=/etc/cron.daily/update.sh
|
|
register: update_script
|
|
ignore_errors: yes
|
|
|
|
- name: Create update script
|
|
shell: touch /etc/cron.daily/update.sh
|
|
when: update_script|failed
|
|
|
|
- name: Set update script as executable
|
|
shell: chmod +x /etc/cron.daily/update.sh
|
|
when: update_script|failed
|
|
|
|
- name: Add update line to update script
|
|
shell: echo apt-get update && apt-get upgrade -y && apt-get clean && apt-get autoclean && apt-get autoremove -y && apt-get update >> /etc/cron.daily/update.sh
|
|
when: update_script|failed
|
|
|
|
- name: test for swap partition
|
|
shell: swapon -s | grep -E "^/"
|
|
register: swapfile
|
|
ignore_errors: yes
|
|
|
|
- name: create swapfile
|
|
when: swapfile|failed
|
|
shell: fallocate -l 4G /swapfile
|
|
|
|
- name: set swapfile permissions
|
|
when: swapfile|failed
|
|
file: path=/swapfile
|
|
owner=root
|
|
group=root
|
|
mode=0600
|
|
|
|
- name: prepare swapfile
|
|
when: swapfile|failed
|
|
shell: mkswap /swapfile
|
|
|
|
- name: enable swap
|
|
when: swapfile|failed
|
|
shell: swapon /swapfile
|
|
|
|
- name: add swapfile
|
|
when: swapfile|failed
|
|
lineinfile: dest=/etc/fstab
|
|
regexp="^/swapfile"
|
|
state=present
|
|
line="/swapfile none swap sw 0 0"
|
|
|
|
- name: set swappiness (temporarily)
|
|
when: swapfile|failed
|
|
shell: echo 10 | tee /proc/sys/vm/swappiness
|
|
|
|
- name: set swappiness (permanent)
|
|
when: swapfile|failed
|
|
lineinfile: dest=/etc/sysctl.conf
|
|
regexp="^vm.swappiness"
|
|
state=present
|
|
line="vm.swappiness = 10"
|
|
|
|
- name: set cache pressure (temporarily)
|
|
when: swapfile|failed
|
|
shell: echo 50 | tee /proc/sys/vm/vfs_cache_pressure
|
|
|
|
- name: set cache pressure (permanent)
|
|
when: swapfile|failed
|
|
lineinfile: dest=/etc/sysctl.conf
|
|
regexp="^vm.vfs_cache_pressure"
|
|
state=present
|
|
line="vm.swappiness = 50"
|