From 72e69659fe0a51bf2e61cebdb0b3c66ee9e564ba Mon Sep 17 00:00:00 2001 From: Emil Renner Berthing Date: Wed, 26 Sep 2018 12:55:55 +0200 Subject: Format yaml lists like yaml.org --- roles/space_server/tasks/ansible.yml | 30 ++++----- roles/space_server/tasks/avahi.yml | 114 ++++++++++++++++----------------- roles/space_server/tasks/bird.yml | 23 ++++--- roles/space_server/tasks/blackhole.yml | 2 +- roles/space_server/tasks/dhcpd.yml | 4 +- roles/space_server/tasks/kernel.yml | 6 +- roles/space_server/tasks/main.yml | 2 +- roles/space_server/tasks/networkd.yml | 5 +- roles/space_server/tasks/nftables.yml | 6 +- roles/space_server/tasks/radius.yml | 41 ++++++------ roles/space_server/tasks/radvd.yml | 4 +- roles/space_server/tasks/sshd.yml | 12 ++-- roles/space_server/tasks/sudo.yml | 2 +- roles/space_server/tasks/unbound.yml | 4 +- 14 files changed, 126 insertions(+), 129 deletions(-) (limited to 'roles/space_server/tasks') diff --git a/roles/space_server/tasks/ansible.yml b/roles/space_server/tasks/ansible.yml index b37b1ca..209cb5b 100644 --- a/roles/space_server/tasks/ansible.yml +++ b/roles/space_server/tasks/ansible.yml @@ -14,20 +14,20 @@ option: '{{ item.option }}' value: '{{ item.value }}' with_items: - - section: defaults - option: 'gathering' - value: 'smart' - - section: defaults - option: 'fact_caching' - value: 'jsonfile' - - section: defaults - option: 'fact_caching_connection' - value: '/tmp/ansible' - - section: defaults - option: 'fact_caching_timeout' - value: '600' - - section: defaults - option: 'error_on_missing_handler' - value: 'True' + - section: defaults + option: 'gathering' + value: 'smart' + - section: defaults + option: 'fact_caching' + value: 'jsonfile' + - section: defaults + option: 'fact_caching_connection' + value: '/tmp/ansible' + - section: defaults + option: 'fact_caching_timeout' + value: '600' + - section: defaults + option: 'error_on_missing_handler' + value: 'True' # vim: set ts=2 sw=2 et: diff --git a/roles/space_server/tasks/avahi.yml b/roles/space_server/tasks/avahi.yml index c8baa77..59a8836 100644 --- a/roles/space_server/tasks/avahi.yml +++ b/roles/space_server/tasks/avahi.yml @@ -7,7 +7,7 @@ - avahi-tools # pulls in avahi package - nss-mdns tags: - - packages + - packages - name: Configure avahi-daemon ini_file: @@ -17,62 +17,62 @@ option: '{{ item.option }}' value: '{{ item.value }}' with_items: - - section: server - option: 'host-name' - value: '{{ hostname }}' - - section: server - option: 'domain-name' - value: 'local' - - section: server - option: 'browse-domains' - value: '' - - section: server - option: 'use-ipv4' - value: 'yes' - - section: server - option: 'use-ipv6' - value: 'yes' - - section: server - option: 'allow-interfaces' - value: 'lan11,lan12,lan14' - - section: server - option: 'enable-dbus' - value: 'yes' - - section: server - option: 'disallow-other-stacks' - value: 'yes' - - section: wide-area - option: 'enable-wide-area' - value: 'yes' - - section: publish - option: 'disable-publishing' - value: 'no' - - section: publish - option: 'disable-user-service-publishing' - value: 'no' - - section: publish - option: 'publish-addresses' - value: 'yes' - - section: publish - option: 'publish-hinfo' - value: 'yes' - - section: publish - option: 'publish-workstation' - value: 'no' - - section: publish - option: 'publish-domain' - value: 'yes' - - section: publish - option: 'publish-dns-servers' - value: '185.38.175.0,2a01:4260:1ab::' - - section: publish - option: 'publish-resolv-conf-dns-servers' - value: 'no' - - section: reflector - option: 'enable-reflector' - value: 'yes' + - section: server + option: 'host-name' + value: '{{ hostname }}' + - section: server + option: 'domain-name' + value: 'local' + - section: server + option: 'browse-domains' + value: '' + - section: server + option: 'use-ipv4' + value: 'yes' + - section: server + option: 'use-ipv6' + value: 'yes' + - section: server + option: 'allow-interfaces' + value: 'lan11,lan12,lan14' + - section: server + option: 'enable-dbus' + value: 'yes' + - section: server + option: 'disallow-other-stacks' + value: 'yes' + - section: wide-area + option: 'enable-wide-area' + value: 'yes' + - section: publish + option: 'disable-publishing' + value: 'no' + - section: publish + option: 'disable-user-service-publishing' + value: 'no' + - section: publish + option: 'publish-addresses' + value: 'yes' + - section: publish + option: 'publish-hinfo' + value: 'yes' + - section: publish + option: 'publish-workstation' + value: 'no' + - section: publish + option: 'publish-domain' + value: 'yes' + - section: publish + option: 'publish-dns-servers' + value: '185.38.175.0,2a01:4260:1ab::' + - section: publish + option: 'publish-resolv-conf-dns-servers' + value: 'no' + - section: reflector + option: 'enable-reflector' + value: 'yes' notify: - - restart avahi-daemon + - restart avahi-daemon - name: Configure hosts template: @@ -82,7 +82,7 @@ group: root mode: 0644 notify: - - restart avahi-daemon + - restart avahi-daemon - name: Enable avahi-daemon service systemd: diff --git a/roles/space_server/tasks/bird.yml b/roles/space_server/tasks/bird.yml index 340bfc2..cdf402b 100644 --- a/roles/space_server/tasks/bird.yml +++ b/roles/space_server/tasks/bird.yml @@ -4,10 +4,10 @@ name: '{{ item }}' state: present with_items: - - bird - - bird6 + - bird + - bird6 tags: - - packages + - packages - name: Make sure /etc/bird exists file: @@ -23,10 +23,9 @@ owner: root group: root mode: 0644 - with_fileglob: - - 'bird/*' + with_fileglob: 'bird/*' notify: - - restart bird + - restart bird - name: Create bird.conf and bird6.conf symlinks file: @@ -35,8 +34,8 @@ state: link force: yes with_items: - - bird - - bird6 + - bird + - bird6 # bird6 wants the link to have a link-local address # when starting, so wait for it @@ -62,16 +61,16 @@ masked: no state: started with_items: - - bird - - bird6 + - bird + - bird6 when: not chroot - name: '- when in chroot' command: 'systemctl enable {{ item }}.service' args: creates: '/etc/systemd/system/multi-user.target.wants/{{ item }}.service' with_items: - - bird - - bird6 + - bird + - bird6 when: chroot # vim: set ts=2 sw=2 et: diff --git a/roles/space_server/tasks/blackhole.yml b/roles/space_server/tasks/blackhole.yml index bd79f37..7c3b510 100644 --- a/roles/space_server/tasks/blackhole.yml +++ b/roles/space_server/tasks/blackhole.yml @@ -14,7 +14,7 @@ group: root mode: 0755 notify: - - restart blackhole + - restart blackhole - name: Install blackhole service copy: diff --git a/roles/space_server/tasks/dhcpd.yml b/roles/space_server/tasks/dhcpd.yml index 9c5c2ad..cd09a04 100644 --- a/roles/space_server/tasks/dhcpd.yml +++ b/roles/space_server/tasks/dhcpd.yml @@ -4,7 +4,7 @@ name: dhcp-server state: present tags: - - packages + - packages - name: Configure dhcpd template: @@ -14,7 +14,7 @@ group: root mode: 0644 notify: - - restart dhcpd + - restart dhcpd - name: Enable dhcpd service systemd: diff --git a/roles/space_server/tasks/kernel.yml b/roles/space_server/tasks/kernel.yml index 1725541..b87bccc 100644 --- a/roles/space_server/tasks/kernel.yml +++ b/roles/space_server/tasks/kernel.yml @@ -7,8 +7,8 @@ group: root mode: 0755 with_items: - - '/etc/kernel' - - '/etc/kernel/install.d' + - '/etc/kernel' + - '/etc/kernel/install.d' - name: Mask grubby file: @@ -38,6 +38,6 @@ name: kernel state: present tags: - - packages + - packages # vim: set ts=2 sw=2 et: diff --git a/roles/space_server/tasks/main.yml b/roles/space_server/tasks/main.yml index bbec9f6..0a0aed0 100644 --- a/roles/space_server/tasks/main.yml +++ b/roles/space_server/tasks/main.yml @@ -7,7 +7,7 @@ group: root mode: 0644 tags: - - fstab + - fstab - import_tasks: ansible.yml tags: ansible diff --git a/roles/space_server/tasks/networkd.yml b/roles/space_server/tasks/networkd.yml index bd44638..fcca317 100644 --- a/roles/space_server/tasks/networkd.yml +++ b/roles/space_server/tasks/networkd.yml @@ -13,10 +13,9 @@ owner: root group: root mode: 0644 - with_fileglob: - - 'networkd/network/*' + with_fileglob: 'networkd/network/*' notify: - - restart networkd + - restart networkd - name: Create systemd-networkd-wait-online drop-in directory file: diff --git a/roles/space_server/tasks/nftables.yml b/roles/space_server/tasks/nftables.yml index 726143c..73e9251 100644 --- a/roles/space_server/tasks/nftables.yml +++ b/roles/space_server/tasks/nftables.yml @@ -12,7 +12,7 @@ name: nftables state: present tags: - - packages + - packages - name: Symlink to /etc/nftables.conf file: @@ -21,7 +21,7 @@ state: link force: yes notify: - - reload nftables + - reload nftables - name: Configure nftables copy: dest: '/etc/nftables.conf' @@ -30,7 +30,7 @@ group: root mode: 0644 notify: - - reload nftables + - reload nftables - name: Enable nftables service systemd: diff --git a/roles/space_server/tasks/radius.yml b/roles/space_server/tasks/radius.yml index 021a9bc..521f6ae 100644 --- a/roles/space_server/tasks/radius.yml +++ b/roles/space_server/tasks/radius.yml @@ -3,30 +3,29 @@ dnf: name: '{{ item }}' state: present - with_fileglob: - - 'radius/freeradius-assha-*.fc{{ ansible_distribution_major_version }}.*.rpm' + with_fileglob: 'radius/freeradius-assha-*.fc{{ ansible_distribution_major_version }}.*.rpm' tags: - - packages + - packages - name: Make sure curl and diffutils are installed dnf: name: '{{ item }}' state: present with_items: - - curl - - diffutils + - curl + - diffutils tags: - - packages + - packages - name: Disable default site file: path: '/etc/raddb/sites-enabled/{{ item }}' state: absent with_items: - - default - - inner-tunnel + - default + - inner-tunnel notify: - - restart radiusd + - restart radiusd - name: Configure radiusd copy: dest: '/etc/raddb/{{ item }}' @@ -35,12 +34,12 @@ group: radiusd mode: 0640 with_items: - - radiusd.conf - - mods-available/eap - - sites-available/labitat - - sites-available/labitat-inner + - radiusd.conf + - mods-available/eap + - sites-available/labitat + - sites-available/labitat-inner notify: - - restart radiusd + - restart radiusd - name: Configure radius clients template: dest: '/etc/raddb/clients.conf' @@ -49,7 +48,7 @@ group: radiusd mode: 0640 notify: - - restart radiusd + - restart radiusd - name: Enable labitat site file: path: '/etc/raddb/sites-enabled/{{ item }}' @@ -59,10 +58,10 @@ group: radiusd force: yes with_items: - - labitat - - labitat-inner + - labitat + - labitat-inner notify: - - restart radiusd + - restart radiusd - name: Create getusers script template: @@ -79,10 +78,10 @@ group: root mode: 0644 with_items: - - getusers.service - - getusers.timer + - getusers.service + - getusers.timer notify: - - restart getusers + - restart getusers - name: Enable getusers timer systemd: diff --git a/roles/space_server/tasks/radvd.yml b/roles/space_server/tasks/radvd.yml index 668750e..a3346eb 100644 --- a/roles/space_server/tasks/radvd.yml +++ b/roles/space_server/tasks/radvd.yml @@ -4,7 +4,7 @@ name: radvd state: present tags: - - packages + - packages - name: Configure radvd copy: @@ -14,7 +14,7 @@ group: root mode: 0644 notify: - - restart radvd + - restart radvd - name: Create service drop-in directory file: diff --git a/roles/space_server/tasks/sshd.yml b/roles/space_server/tasks/sshd.yml index efbfa97..aaf6452 100644 --- a/roles/space_server/tasks/sshd.yml +++ b/roles/space_server/tasks/sshd.yml @@ -4,7 +4,7 @@ name: openssh-server state: present tags: - - packages + - packages - name: Configure sshd lineinfile: @@ -12,12 +12,12 @@ regexp: '{{ item.regexp }}' line: '{{ item.line }}' with_items: - - regexp: '^PasswordAuthentication' - line: 'PasswordAuthentication no' - - regexp: '^#*GSSAPIAuthentication' - line: 'GSSAPIAuthentication no' + - regexp: '^PasswordAuthentication' + line: 'PasswordAuthentication no' + - regexp: '^#*GSSAPIAuthentication' + line: 'GSSAPIAuthentication no' notify: - - restart sshd + - restart sshd - name: Enable sshd service systemd: diff --git a/roles/space_server/tasks/sudo.yml b/roles/space_server/tasks/sudo.yml index e8801a6..f5f0444 100644 --- a/roles/space_server/tasks/sudo.yml +++ b/roles/space_server/tasks/sudo.yml @@ -4,7 +4,7 @@ name: sudo state: present tags: - - packages + - packages - name: Install sudoers file copy: diff --git a/roles/space_server/tasks/unbound.yml b/roles/space_server/tasks/unbound.yml index e4f575a..c384635 100644 --- a/roles/space_server/tasks/unbound.yml +++ b/roles/space_server/tasks/unbound.yml @@ -4,7 +4,7 @@ name: unbound state: present tags: - - packages + - packages - name: Configure unbound template: @@ -14,7 +14,7 @@ group: root mode: 0644 notify: - - restart unbound + - restart unbound - name: Enable unbound service systemd: -- cgit v1.2.1