|
|
@@ -56,6 +56,7 @@
|
|
|
- fail2ban
|
|
|
- iptables-persistent
|
|
|
- ssh
|
|
|
+ - locales-all
|
|
|
|
|
|
- debug:
|
|
|
msg: The main interface is {{ ansible_default_ipv4.interface }}
|
|
|
@@ -78,21 +79,11 @@
|
|
|
key: "{{ lookup('file', 'keys/'+ item + '.key.pub') }}"
|
|
|
with_items: "{{ users }}"
|
|
|
|
|
|
- - name: Fix Debian10's shitty iptables support and more
|
|
|
- file:
|
|
|
- src: '{{ item.src }}'
|
|
|
- dest: '{{ item.dest }}'
|
|
|
- state: link
|
|
|
- loop:
|
|
|
- - { src: /usr/sbin/iptables-save, dest: /bin/iptables-save }
|
|
|
- - { src: /usr/sbin/iptables-restore, dest: /bin/iptables-restore }
|
|
|
- - { src: /usr/sbin/iptables-apply, dest: /bin/iptables-apply }
|
|
|
- - { src: /usr/sbin/ip6tables-save, dest: /bin/ip6tables-save }
|
|
|
- - { src: /usr/sbin/ip6tables-restore, dest: /bin/ip6tables-restore }
|
|
|
- - { src: /usr/sbin/ip6tables-apply, dest: /bin/ip6tables-apply }
|
|
|
- - { src: /usr/sbin/update-initramfs, dest: /bin/update-initramfs }
|
|
|
- - { src: /usr/sbin/mkinitramfs, dest: /bin/mkinitramfs }
|
|
|
- - { src: /usr/sbin/tincd, dest: /bin/tincd }
|
|
|
+ - name: Fix Debian10's shitty executables paths
|
|
|
+ lineinfile:
|
|
|
+ dest: /etc/environment
|
|
|
+ line: 'PATH="/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin"'
|
|
|
+ state: present
|
|
|
when: ansible_distribution == 'Debian' and ansible_distribution_major_version == '10'
|
|
|
|
|
|
- name: create rules.v4
|
