ajout playbook

sio2/sisr2/ansiblecontrole/bonus.yml

@@ -0,0 +1,15 @@
+---
+
+- hosts: all
+  tasks:
+
+  - name: activer UFW
+    community.general.ufw:
+      state: enabled
+      policy: allow
+
+  - name: access port 22
+    community.general.ufw:
+      rule: allow
+      port: '22'
+      proto: ssh

sio2/sisr2/ansiblecontrole/hosts

@@ -0,0 +1,2 @@
+[adm]
+srv

sio2/sisr2/ansiblecontrole/insert.yml

@@ -0,0 +1,13 @@
+---
+
+- hosts: all
+  tasks:
+  - name: Creation fichier /etc/resolv.conf
+    copy:
+      dest: "/etc/resolv.conf"
+      content: |
+        search sio.lan
+        domain sio.lan
+        nameserver 10.121.38.7
+        nameserver 10.121.38.8
+        

sio2/sisr2/ansiblecontrole/paquet.yml

@@ -0,0 +1,13 @@
+---
+- name: mon playbook
+  hosts: srv
+  tasks:
+  - name: Remove wpasupplicant
+    ansible.builtin.package:
+      name: "wpasupplicant"
+      state: absent
+  - name: Remove rpcbind     
+    ansible.builtin.package:
+      name: "rpcbind"
+      state: absent
+

sio2/sisr2/ansiblecontrole/replace.yml

@@ -0,0 +1,9 @@
+---
+
+- hosts: all
+  tasks: 
+  - replace:
+      path: /etc/ssh/sshd_config
+      regexp: 'PermitRootLogin yes'
+      replace: 'PermitRootLogin prohibit-password'
+      backup: yes

sio2/sisr2/ansiblecontrole/user.yml

@@ -0,0 +1,15 @@
+---
+- name: mon playbook
+  hosts: srv
+  tasks:
+    - name: création du user sioadm
+      user:
+        name: sioadm
+        state: present
+        shell: /bin/bash
+        generate_ssh_key: yes
+        uid: 1200
+        groups: sudo
+        append: yes
+        password: "{{ 'sioadm' | password_hash('sha512')}}"
+