Basic server

This role describes a basic server, and contains all best practices with regards to locales, default packages, shell and editor config

Requirements

None.

Role Variables

Default variables are defined in defaults/ and vars/ directory :

Variable	Default value	Description
`default_locale`	en_US.UTF-8	Default locale
`rootpromptcolor`	red	Prompt color root user
`userpromptcolor`	green	Prompt color default user
`promptsite_tag`	NULL	Site information to display in prompt
`promptsite_sep`	"#"	Prompt separator
`users_groups`	[]	List of groups to create
`user_default_shell`	/bin/bash	Default user shell
`yum_disabled_plugins`	['fastestmirror']	Disable yum plugins
`yum_enabled_plugins`	[]	Enable yum plugins
`users`	[]	List of users to create
`users.sshkeys`	[]	List of sshkeys of users to deploy
`extra_packages`	[]	Array of packages to install on the system
`extra_remove_packages`	[]	Array of packages to remove on the system
`install_epel`	true	Enable EPEL repository on RedHat family
`root_password`		Set root password in crypt form with following command mkpasswd --method=sha-512
`install_sudoers`	true	Deploy sudoers
`manage_locales`	true	Manage locales
`manage_firewalld`	true	Ensure firewalld is installed, enabled and started
`disable_network_manager`	false	Ensure NetworkManager is removed and systemd-netowrkd is enabled and started
`historytime_format`	'%Y/%m/%d - %H:%M:%S '	Configure default history time format
`manage_hostname`	true	Update /etc/hosts by adding entry with default IP address
`remove_loopback_hostname_entry`	true	Remove 127.0.0.1 entry associated to host name fqdn (i.e 127.0.0.1.*hostname.fqdn)
`sudo_lines`	[]	Array of sudo lines to deploy on the server
`copy_admin_scripts`	false	Deploy powerfull admin scripts
`service_disabled`	[]	List to service to stopped and disabled at boot
`main_interface`	ansible_default_ipv4.interface	Default main interface

DNS options :

Variable	Default value	Description
`dns_search`	[]	Array of search domain
`dns_servers`	['8.8.8.8']	Array of dns servers
`dns_domain`	NULL	Dns domain of the server

SSH options :

Variable	Default value	Description
`ssh_enable_passwd_auth`	yes	Enable/disable password authentication
`ssh_enable_root_login`	yes	Enable/disable root login
`ssh_use_dns`	yes	Enable/disable DNS resolution

ATOP options :

Variable	Default value	Description
`atop_enable`	yes	Enable/disable atop installation
`atop_interval`	600	Log interval
`atop_retention_day`	21	Logs retention

Logrotate options :

Variable	Default value	Description
`logrotate_enable`	true	Enable/disable logrotate installation and specific configuration
`logrotate_compress`	true	Enable/disable logrotate compression
`logrotate_period`	weekly	Set default logrotate period (daily, weekly, monthly)
`logrotate_rotate`	4	Period retention before removing log files

/etc/hosts entry :

Variable	Default value	Description
`hosts_entry.ip`		Host IP address
`hosts_entry.fqdn`		Host Fully Qualify Domain Name
`hosts_entry.hostname`		Host name

Sample playbooks

Deploy configuration with epel-release installed as an extra package

- hosts: all
  roles:
    - role: basicserver
      extra_packages:
        - epel-release

Prompt configuration

The following variable allows you to alter the default prompt (light green) :

rootpromptcolor: red

You can choose the prompt color among ANSI colors : black, red, green, yellow, blue, magenta, cyan, white

Install additionnal packages

The following variable allows you to install additionnal packages :

extra_packages