mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2025-01-05 09:24:12 +01:00
9f3149d00e
Move the 'sshd_enable_includes' override to aur's host vars instead of specifying it as part of playbooks/aur.archlinux.org. Otherwise, would break the AUR's SSH auth if ssh.d/aurweb_config does not get included.
13 lines
331 B
YAML
13 lines
331 B
YAML
- name: Basic setup for all hosts
|
|
hosts: all
|
|
remote_user: root
|
|
roles:
|
|
- { role: common }
|
|
- { role: firewalld }
|
|
- { role: wireguard }
|
|
- { role: sshd }
|
|
- { role: root_ssh }
|
|
- { role: borg_client, tags: ["borg"], when: "'borg_clients' in group_names" }
|
|
- { role: hardening }
|
|
- { role: fail2ban }
|