X-Git-Url: https://git.distorted.org.uk/~mdw/distorted-ansible/blobdiff_plain/3f6c599278bae19250f1551830d96d103c1ff38d..c65227e384f9525b7a6223516c63e42d49798cc0:/roles/common/tasks/main.yml

diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index dc2d0ad..bfad555 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -1,3 +1,7 @@
+### -*-yaml-*-
+###
+### Tasks applicable for all hosts.
+
 ---
 
 ###--------------------------------------------------------------------------
@@ -11,22 +15,46 @@
 ### PKI machinery.
 
 - name: install PKI maintenance scripts
-  tags: [pki]
+  tags: [pki, pki-scripts]
   copy: src=pki/{{ item }} dest=/etc/cron.daily
   with_items:
     - update-ca-certs
     - check-x509-certs
 
+- name: install common PKI files
+  tags: [pki, pki-keys]
+  copy: src=pki/{{ item }} dest=/etc/ca
+  with_items:
+    - ca.cert
+    - dh-param.pem
+    - dh-param-2048.pem
+    - openssl.conf
+
+- name: install /etc/pki/CA link
+  tags: [pki, pki-link]
+  file: path=/etc/pki/CA/cacert.pem state=link src=../../ca/ca.cert
+
 ###--------------------------------------------------------------------------
 ### NTP configuration.
 
-- name: install NTP configuration files
+- name: install NTP client configuration files
   tags: [ntp, ntp-client]
   copy: src=ntp-client/ntp.conf dest=/etc
-  when: server is not defined or 'ntp' not in server
+  when: ('ntp') not in server |default([])
   notify: restart ntpd
 
 ###--------------------------------------------------------------------------
+### Network databases.
+
+- name: install netdb files
+  tags: netdb
+  copy: src=netdb/{{ item }} dest=/etc
+  with_items:
+    - hosts
+    - networks
+    - services
+
+###--------------------------------------------------------------------------
 ### SSH configuration.
 
 - name: install SSH configuration files
@@ -41,14 +69,49 @@
 
 - name: install main keys for root SSH access
   tags: [ssh, ssh-root]
-  template: src=ssh-root-authkeys dest=/root/.ssh/authkeys.base
+  template: src=ssh-root/authkeys.base dest=/root/.ssh/authkeys.base
+  notify: make in /root/.ssh
 
 - name: install keys for root SSH access
   tags: [ssh, ssh-root]
   copy: src=ssh-root/{{ item }} dest=/root/.ssh
+  notify: make in /root/.ssh
   with_items:
     - Makefile
     - config.m4
     - known_hosts.extra
 
+###--------------------------------------------------------------------------
+### Backup machinery.
+
+- name: install backup filters
+  tags: [backup, backup-filters]
+  copy: src=backup/filter.{{ item.label }} dest={{ item.dest }}/.rsync-backup
+  with_items:
+    - { label: 'home', dest: '/home' }
+    - { label: 'var-spool', dest: '/var/spool' }
+
+- name: install required backup scripts on non-Debian hosts
+  tags: [backup, backup-scripts]
+  copy: src=backup/fshash dest=/usr/local/bin
+  when: os != 'debian'
+
+###--------------------------------------------------------------------------
+### Other miscellaneous files.
+
+- name: install sudo configuration
+  tags: [sudo]
+  copy: src=sudo/sudoers dest=/etc
+
+- name: install common scripts
+  tags: [scripts]
+  copy: src=scripts/{{ item }} dest=/usr/local/bin
+  with_items:
+    - fetch-unpack-archive
+    - genx509
+
+- name: install root Git configuration
+  tags: [root-files]
+  copy: src=root/gitconfig dest=/root/.gitconfig
+
 ###----- That's all, folks --------------------------------------------------