You've already forked RekomenciBackend
92 lines
2.5 KiB
YAML
92 lines
2.5 KiB
YAML
---
|
|
- name: Base system setup
|
|
hosts: servers
|
|
gather_facts: true
|
|
become: true
|
|
serial: "100%"
|
|
|
|
pre_tasks:
|
|
- name: Update apt cache and upgrade system
|
|
ansible.builtin.apt:
|
|
update_cache: true
|
|
cache_valid_time: 3600
|
|
upgrade: dist
|
|
register: apt_upgrade
|
|
tags: system, updates
|
|
|
|
- name: Autoremove and clean
|
|
ansible.builtin.apt:
|
|
autoremove: true
|
|
autoclean: true
|
|
tags: system, updates
|
|
|
|
- name: Check system requirements
|
|
block:
|
|
- name: Verify Python 3 is available
|
|
ansible.builtin.command: which python3
|
|
register: python_check
|
|
changed_when: false
|
|
failed_when: python_check.rc != 0
|
|
|
|
- name: Check available memory
|
|
ansible.builtin.setup:
|
|
filter: ansible_memtotal_mb
|
|
register: memory_info
|
|
failed_when: memory_info.ansible_facts.ansible_memtotal_mb < 512
|
|
tags: validation
|
|
|
|
roles:
|
|
- role: common
|
|
tags: common, system, bootstrap
|
|
|
|
- role: security
|
|
tags: security, harden
|
|
|
|
- role: monitoring
|
|
when: monitoring_enabled | bool
|
|
tags: monitoring
|
|
|
|
post_tasks:
|
|
- name: Display system summary
|
|
ansible.builtin.debug:
|
|
msg: |
|
|
System setup completed on {{ inventory_hostname }}
|
|
OS: {{ ansible_distribution }} {{ ansible_distribution_version }}
|
|
Kernel: {{ ansible_kernel }}
|
|
Architecture: {{ ansible_architecture }}
|
|
Memory: {{ ansible_memtotal_mb }}MB
|
|
CPUs: {{ ansible_processor_vcpus }}
|
|
Storage: {{ ansible_devices.vda.size if ansible_devices.vda is defined
|
|
else (ansible_devices.sda.size if ansible_devices.sda is defined
|
|
else 'N/A') }}
|
|
tags: always, info
|
|
|
|
- name: Check if a reboot is required after updates
|
|
ansible.builtin.stat:
|
|
path: /var/run/reboot-required
|
|
register: reboot_required_file
|
|
tags: system
|
|
|
|
- name: Reboot if required
|
|
ansible.builtin.reboot:
|
|
msg: "Reboot triggered by Ansible for system updates"
|
|
connect_timeout: 10
|
|
reboot_timeout: 600
|
|
pre_reboot_delay: 5
|
|
post_reboot_delay: 45
|
|
test_command: uptime
|
|
when: reboot_required_file.stat.exists
|
|
register: reboot_result
|
|
async: 600
|
|
poll: 0
|
|
tags: system
|
|
|
|
- name: Wait for reboot to complete
|
|
ansible.builtin.wait_for_connection:
|
|
connect_timeout: 20
|
|
sleep: 5
|
|
delay: 5
|
|
timeout: 600
|
|
when: reboot_required_file.stat.exists
|
|
tags: system
|