add tags to config/packages/service
This commit is contained in:
parent
269a2ff6e6
commit
922d1a7105
7 changed files with 36 additions and 1 deletions
|
@ -1,12 +1,18 @@
|
|||
---
|
||||
- name: install pam_url
|
||||
yum: name=pam_url state=installed
|
||||
tags:
|
||||
- packages
|
||||
|
||||
- name: /etc/pki/tls/private/totpcgi.pem
|
||||
copy: src=$puppet_private/2fa-certs/keys/${inventory_hostname}.pem dest=/etc/pki/tls/private/totpcgi.pem mode=0400
|
||||
tags:
|
||||
- config
|
||||
|
||||
- name: /etc/pki/tls/private/totpcgi-ca.cert
|
||||
copy: src=$puppet_private/2fa-certs/keys/ca.crt dest=/etc/pki/tls/private/totpcgi-ca.cert mode=0400
|
||||
tags:
|
||||
- config
|
||||
|
||||
- name: /etc/pam_url.conf - split for staging/phx2/everyone else
|
||||
copy: src=$item dest=/etc/pam_url.conf mode=0644
|
||||
|
@ -14,6 +20,8 @@
|
|||
- $files/2fa/pam_url.conf.${inventory_hostname}
|
||||
- $files/2fa/pam_url.conf.${ansible_domain}
|
||||
- $files/2fa/pam_url.conf
|
||||
tags:
|
||||
- config
|
||||
|
||||
- name: /etc/pam.d/sudo
|
||||
copy: src=$item dest=/etc/pam.d/sudo mode=0644
|
||||
|
@ -21,5 +29,7 @@
|
|||
- $files/2fa/sudo.pam.${inventory_hostname}
|
||||
- $files/2fa/sudo.pam.${ansible_domain}
|
||||
- $files/2fa/sudo.pam
|
||||
tags:
|
||||
- config
|
||||
|
||||
|
||||
|
|
|
@ -63,7 +63,7 @@
|
|||
- rhnsd
|
||||
only_if: '$is_rhel'
|
||||
tags:
|
||||
- services
|
||||
- service
|
||||
- config
|
||||
|
||||
- name: iptables
|
||||
|
|
|
@ -2,16 +2,25 @@
|
|||
#install denyhosts
|
||||
- name: install denyhosts
|
||||
yum: name=denyhosts state=installed
|
||||
tags:
|
||||
- packages
|
||||
|
||||
- name: /etc/denyhosts.conf
|
||||
copy: src=$files/denyhosts/denyhosts.conf dest=/etc/denyhosts.conf
|
||||
notify:
|
||||
- restart denyhosts
|
||||
tags:
|
||||
- config
|
||||
|
||||
- name: /var/lib/denyhosts/allowed-hosts
|
||||
copy: src=$files/denyhosts/allowed-hosts dest=/var/lib/denyhosts/allowed-hosts
|
||||
notify:
|
||||
- restart denyhosts
|
||||
tags:
|
||||
- config
|
||||
|
||||
- name: enable the service
|
||||
service: name=denyhosts state=running enabled=true
|
||||
tags:
|
||||
- service
|
||||
|
||||
|
|
|
@ -27,6 +27,8 @@
|
|||
#
|
||||
- name: setup /etc/nsswitch.conf for client use
|
||||
action: copy src=$files/fas-client/nsswitch.conf dest=/etc/nsswitch.conf owner=root mode=644
|
||||
tags:
|
||||
- config
|
||||
|
||||
#
|
||||
# fasClients needs a valid /etc/fas.conf.
|
||||
|
|
|
@ -1,9 +1,14 @@
|
|||
- name: add infra repo
|
||||
action: get_url url=http://infrastructure.fedoraproject.org/el/infrastructure.repo dest=/etc/yum.repos.d/
|
||||
only_if: '$is_rhel'
|
||||
tags:
|
||||
- config
|
||||
|
||||
|
||||
- name: install cloud-utils
|
||||
action: yum name=cloud-utils state=present
|
||||
tags:
|
||||
- packages
|
||||
|
||||
- name: growpart the second partition (/) to full size
|
||||
action: command growpart /dev/vda 2
|
||||
|
|
|
@ -2,6 +2,7 @@
|
|||
action: yum pkg=postfix state=installed
|
||||
tags:
|
||||
- postfix
|
||||
- packages
|
||||
|
||||
- name: /etc/postfix/main.cf
|
||||
action: copy src=$item dest=/etc/postfix/main.cf
|
||||
|
@ -20,3 +21,5 @@
|
|||
|
||||
- name: enable postfix to start
|
||||
action: service name=postfix state=running enabled=true
|
||||
tags:
|
||||
- service
|
||||
|
|
|
@ -2,11 +2,17 @@
|
|||
|
||||
- name: install rkhunter
|
||||
yum: name=rkhunter state=present
|
||||
tags:
|
||||
- packages
|
||||
|
||||
- name: rkhunter.conf
|
||||
template: src=$files/rkhunter/rkhunter.conf.j2 dest=/etc/rkhunter.conf mode=0640
|
||||
tags:
|
||||
- config
|
||||
|
||||
- name: rkhunter sysconfig
|
||||
copy: src=$files/rkhunter/rkhunter.sysconfig dest=/etc/sysconfig/rkhunter mode=0640
|
||||
tags:
|
||||
- config
|
||||
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue