====== Ansible ======

Notes, links to existing playbooks/roles/etc, stuff. Things.


===== Proxmox =====

  * https://github.com/mozitat/ansible-role-proxmoxy
    * ''<nowiki>proxmoxy__host_tuntap</nowiki>''
    * ''<nowiki>proxmoxy__templates</nowiki>''
    * ''<nowiki>proxmoxy__permission</nowiki>''

==== No subscription nag ====

<code yaml>
- name: Disable login subscription message
  become: yes
  replace:
    path: /usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js
    regexp: "data.status !== 'Active'"
    replace: "false"
</code>

===== Docker + ansible =====

  * https://github.com/philm/ansible_target
  * many more I didn't noted here yet

===== Users management =====

https://gitlab.com/facil/ansible/-/blob/master/roles/common/tasks/main.yml

<code yaml>
- include: admin-account-present.yml user="{{ item }}"
  with_items: "{{ admin_accounts }}"
  when: inventory_hostname in item.hosts or 'all' in item.hosts
- include: admin-account-absent.yml user="{{ item }}"
  with_items: "{{ admin_accounts }}"
  when: inventory_hostname not in item.hosts and 'all' not in item.hosts
</code>

===== misc leechme =====

  * https://gitlab.com/facil/ansible/-/blob/master/roles/common/tasks/security.yml - fix $HOME chmod, umask, /root/.bash_history