Prvni initrole

ansible.cfg

@@ -0,0 +1,10 @@
+[defaults]
+remote_user = ansibler
+host_key_checking = false
+inventory = inventory.yml
+
+[privilege_escalation]
+become = false
+become_method = sudo
+become_user = root
+become_ask_pass = false

inventory-init.yml

@@ -0,0 +1,6 @@
+---
+mailservers:
+  hosts:
+    devtest:
+       ansible_host: 192.168.162.35
+       ansible_user: root

inventory.yml

@@ -2,4 +2,5 @@
 mailservers:
   hosts:
     devtest:
-       ansible_host: 192.168.162.37
+       ansible_host: 192.168.162.35
+       ansible_user: ansibler 

playbooks/initsystem.yml

@@ -1,68 +1,54 @@
 # Jen kopie vim.yml, kterou chci upravit
-#
+# Ma za ukol vytvorit uzivatele ansibler, nahrat mu klic, a zrusit klic z roota z onboardingu
-# Nainstaluje vim, Pathogen, gruvbox
 
 - name: Konfigurace Vimu
   hosts: devtest
   gather_facts: yes
   become: no
 
-  vars:
-    vim_dir: "{{ ansible_env.HOME  }}/.vim"
-    vimrc: "{{ ansible_env.HOME  }}/.vimrc"
-    bashrc: "{{ ansible_env.HOME }}/.bashrc"
-
   tasks:
-    - name: Upgrade balicku
+    - name: Uzivatelske Ucty
-      become: yes
+      user:
-      ansible.builtin.apt:
+        name: ansibler
-        update_cache: true
+        create_home: true
-        upgrade: full
+        comment: "JCH"
-    - name: Instalace Balicku
+        shell: "/bin/bash"
-      become: yes
+    - name: instalace sudo
-      package:
+      apt:
-        name: "{{ item }}"
+        name: sudo
         state: present
-      loop:
+        update_cache: true
-        - [ vim, git, mc, curl, wget ] 
+    - name: ansible sudoer
-
+      copy:
-    - name: Stazeni dotfiles
+        owner: root
-      get_url:
+        group: root
-        dest: "{{ item.dst }}"
+        mode: 700
-        url: "{{ item.src }}"
+        src: /root/gitrepo/ansible/soubory/sudo/ansibler
-        backup: yes
+        dest: /etc/sudoers.d/ansibler
-        force: true
+    
-        mode: 0640
+    - name: Adresarova Struktura /home/ansibler
-      loop:
-        - {src: "https://www.martus.cz/soubory/ansible/bashrc.txt", dst: "{{ bashrc }}" }
-        - {src: "https://www.martus.cz/soubory/ansible/vimrc.txt", dst: "{{ vimrc }}" }
-
-    - name: Adresarova struktura
       file:
-        path: "{{ item }}"
         state: directory
+        force: true
+        mode: 0750
+        owner: ansibler
+        group: ansibler
+        path: "{{ item.path }}"
+      loop:
+        - {path: "/home/ansibler/.ssh"}
+    - name: SSH klic ansibler
+      copy: 
         owner: ansibler
         group: ansibler
         mode: 0750
+        src: "{{ item.src }}"
+        dest: "{{item .dst }}"
       loop:
-        - "{{ vim_dir }}"
+        - {src: "/root/.ssh/id_ed25519.pub", dst: "/home/ansibler/.ssh/authorized_keys"}
-        - "{{ vim_dir }}/swap"
+    - name: Vymazat /root/.ssh/authorized_keys
-        - "{{ vim_dir }}/backup"
+      file: 
-        - "{{ vim_dir }}/autoload"
+        path: /root/.ssh/authorized_keys
-        - "{{ vim_dir }}/bundle"
+        state: absent
 
-    - name: Pathogen pro instalaci doplnku
-      get_url:
-        dest: "{{ vim_dir }}/autoload/pathogen.vim"
-        url: https://tpo.pe/pathogen.vim
 
-    - name: Vim Pluginy
-      git:
-        dest: "{{ vim_dir }}/bundle/{{ item.name }}"
-        repo: "{{ item.url }}"
-        clone: yes
-        update: yes
-        recursive: no
-      loop:
-        - { name: gruvbox, url: https://github.com/morhetz/gruvbox.git }
 

playbooks/update-pkgs.yml

@@ -0,0 +1,12 @@
+---
+- name: upgrade balicku
+  hosts: devtest
+
+  tasks:
+    - name: update a upgrade
+      become: yes
+      apt:
+        update_cache: true
+        upgrade: full
+
+

soubory/sudo/ansibler

@@ -0,0 +1,2 @@
+ansibler	ALL=(ALL)	NOPASSWD:	ALL
+