34 lines
1023 B
YAML
34 lines
1023 B
YAML
---
|
|
- name: Perform regular maintenance
|
|
hosts: virtual
|
|
remote_user: ansible
|
|
|
|
vars_files:
|
|
../inventory/group_vars/all/secrets.yaml
|
|
|
|
roles:
|
|
# Check the Internet connection
|
|
# Check free disk space
|
|
- ../roles/common_healthcheck
|
|
# Ensure that all the required packages are installed
|
|
- ../roles/base_system
|
|
# Update the system
|
|
- ../roles/update_system
|
|
# Harden SSH - we must be sure that the last version of ssh configs are distributed
|
|
- ../roles/harden_ssh
|
|
# Update configs - omz, nvim, ranger and so on. Distribute the last version of those configs
|
|
- ../roles/update_configs
|
|
# Make sure that the services that are supposed to run are running
|
|
- ../roles/check_services
|
|
|
|
- name: Ensure all web-servers have fresh TLS certificates
|
|
hosts: web-servers
|
|
remote_user: ansible
|
|
|
|
vars_files:
|
|
../inventory/group_vars/all/secrets.yaml
|
|
|
|
roles:
|
|
# Pull certificates from cert_proxy and distribute them among the servers
|
|
- ../roles/update_certificates
|