2023-09-06 14:43:55 +02:00
|
|
|
## This playbook deploys a KDE desktop machine for LinuxMuster.
|
|
|
|
|
---
|
|
|
|
|
- name: apply configuration to the machines
|
|
|
|
|
hosts: all
|
|
|
|
|
remote_user: ansible
|
|
|
|
|
become: yes
|
|
|
|
|
|
|
|
|
|
vars:
|
|
|
|
|
domain: "{{ ansible_domain }}"
|
|
|
|
|
kerberize_uris: qgm.lan
|
2023-09-06 16:45:33 +02:00
|
|
|
realm: QGM.LAN
|
|
|
|
|
serverhostname: server
|
|
|
|
|
smb_server: server
|
2023-09-06 14:43:55 +02:00
|
|
|
apt_conf: Acquire::http::Proxy "http://netboot.qgm.lan:3142/";
|
|
|
|
|
ntp_serv: server.qgm.lan
|
|
|
|
|
proxy: http://firewall.qgm.lan:3128
|
|
|
|
|
no_proxy: firewall.qgm.lan, server.qgm.lan, qgm.lan
|
|
|
|
|
|
|
|
|
|
## PAM mount nextcloud, remove or leave empty to skip:
|
|
|
|
|
web_dav: https://wolke.qg-moessingen.de/remote.php/dav/files/%(USER)
|
|
|
|
|
|
|
|
|
|
## Local mirror for mscorefonts. Remove or leave empty to use no mirror:
|
|
|
|
|
mirror_msfonts: http://netboot.qgm.lan/mscorefonts/
|
|
|
|
|
## Local Mirror for Greenfoot and BlueJ
|
|
|
|
|
mirror_javadev: http://netboot.qgm.lan/javadev/
|
2023-09-22 10:04:09 +02:00
|
|
|
## Bluej/Greenfoot Versionen
|
|
|
|
|
bluej_target_version: "5.2.0"
|
|
|
|
|
greenfoot_target_version: "3.7.1"
|
2023-09-06 14:43:55 +02:00
|
|
|
|
|
|
|
|
# Linbo Passwort
|
|
|
|
|
rsyncsecret: Muster!
|
|
|
|
|
## Use grub-mkpasswd-pbkdf2: to calculate the password hash, this hash is for "geheim":
|
|
|
|
|
grub_pwd: 'grub.pbkdf2.sha512.10000.775CB8C7FDA6892B684049EC0257245BA886719264ED9CDB3A7543B3562CC71BA70DB31F3550586D1F41642B13AEF61857FE009AF891D0854A8383251C55119D.30056755AF00EA171069E591D3CA18A592C8C5DEC7E0DEE957AC23A51F58CC5E05231AC49674EC19F2BACAD7D510DF58A157840596F0247054C7FD42C5D43BE7'
|
|
|
|
|
nfs4: false
|
|
|
|
|
extra_pkgs:
|
|
|
|
|
- vim
|
|
|
|
|
- mc
|
|
|
|
|
- tmux
|
|
|
|
|
- console-setup
|
|
|
|
|
- krb5-user
|
|
|
|
|
- unattended-upgrades
|
|
|
|
|
- debconf-utils
|
|
|
|
|
- ctorrent
|
|
|
|
|
extra_pkgs_bpo: [] # [ linux-image-amd64 ]
|
|
|
|
|
|
|
|
|
|
roles:
|
2023-09-22 10:04:09 +02:00
|
|
|
#- lmn_network
|
2023-09-20 15:55:57 +02:00
|
|
|
- up2date_debian
|
2023-09-22 10:04:09 +02:00
|
|
|
#- lmn_sssd
|
|
|
|
|
#- lmn_mount
|
|
|
|
|
#- lmn_kde
|
2023-09-06 14:43:55 +02:00
|
|
|
- lmn_qgm ## school specific customization
|
2023-09-20 15:55:57 +02:00
|
|
|
- lmn_qgsddm
|
2023-09-22 10:04:09 +02:00
|
|
|
#- lmn_printer
|
2023-09-06 14:43:55 +02:00
|
|
|
#- kerberize
|
2023-11-14 10:07:36 +01:00
|
|
|
|
|
|
|
|
tasks:
|
|
|
|
|
- name: Fix unattended-upgrades
|
|
|
|
|
ansible.builtin.copy:
|
|
|
|
|
dest: /etc/apt/apt.conf.d/20auto-upgrades
|
|
|
|
|
content: |
|
|
|
|
|
APT::Periodic::Update-Package-Lists "1";
|
|
|
|
|
APT::Periodic::Unattended-Upgrade "1";
|
|
|
|
|
|
|
|
|
|
- name: Prepare mount point for homes
|
|
|
|
|
ansible.builtin.file:
|
|
|
|
|
path: /srv/samba/schools/default-school/
|
|
|
|
|
state: directory
|
|
|
|
|
mode: '0755'
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
- name: Fix mount point permissions and owner
|
|
|
|
|
file:
|
|
|
|
|
path: "{{ item }}"
|
|
|
|
|
mode: '0755'
|
|
|
|
|
owner: root
|
|
|
|
|
group: root
|
|
|
|
|
loop:
|
|
|
|
|
- /srv/samba
|
|
|
|
|
- /srv/samba/schools
|
|
|
|
|
- /srv/samba/schools/default-school
|
