feat: adding different playbooks for development and media playing templates
This commit is contained in:
parent
e03862bc00
commit
b8cb593416
2 changed files with 81 additions and 0 deletions
42
fedora-42-dev.yaml
Normal file
42
fedora-42-dev.yaml
Normal file
|
|
@ -0,0 +1,42 @@
|
||||||
|
- name: Configure Fedora 42 Gnome Template
|
||||||
|
hosts: 127.0.0.1
|
||||||
|
connection: local
|
||||||
|
tasks:
|
||||||
|
- name: 'Baseline hardening'
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: 'baseline'
|
||||||
|
vars:
|
||||||
|
umask_changes: true
|
||||||
|
manage_network: true
|
||||||
|
allow_ptrace: true
|
||||||
|
use_hardened_malloc: true
|
||||||
|
|
||||||
|
- name: 'Gnome package stuff'
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: gnome
|
||||||
|
|
||||||
|
- name: 'Install trivalent'
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: trivalent
|
||||||
|
|
||||||
|
- name: 'Setup arkenfox'
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: arkenfox
|
||||||
|
vars:
|
||||||
|
enable_webgl: false
|
||||||
|
|
||||||
|
- name: 'Install wireguard-tools and neovim'
|
||||||
|
ansible.builtin.dnf5:
|
||||||
|
name:
|
||||||
|
- wireguard-tools
|
||||||
|
- neovim
|
||||||
|
state: 'present'
|
||||||
|
|
||||||
|
- name: 'Install devtools'
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: devtools
|
||||||
|
|
||||||
|
- name: 'Handle SUID binaries'
|
||||||
|
ansible.builtin.script:
|
||||||
|
cmd: ./remove_suid.sh
|
||||||
|
|
||||||
39
fedora-42-media.yaml
Normal file
39
fedora-42-media.yaml
Normal file
|
|
@ -0,0 +1,39 @@
|
||||||
|
- name: Configure Fedora 42 Gnome Template
|
||||||
|
hosts: 127.0.0.1
|
||||||
|
connection: local
|
||||||
|
tasks:
|
||||||
|
- name: 'Baseline hardening'
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: 'baseline'
|
||||||
|
vars:
|
||||||
|
umask_changes: true
|
||||||
|
manage_network: true
|
||||||
|
allow_ptrace: false
|
||||||
|
use_hardened_malloc: false
|
||||||
|
|
||||||
|
- name: 'Gnome package stuff'
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: gnome
|
||||||
|
|
||||||
|
- name: 'Install trivalent'
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: trivalent
|
||||||
|
|
||||||
|
- name: 'Setup arkenfox'
|
||||||
|
ansible.builtin.include_role:
|
||||||
|
name: arkenfox
|
||||||
|
vars:
|
||||||
|
enable_webgl: true
|
||||||
|
|
||||||
|
- name: 'Install wireguard-tools and neovim and mpv'
|
||||||
|
ansible.builtin.dnf5:
|
||||||
|
name:
|
||||||
|
- wireguard-tools
|
||||||
|
- neovim
|
||||||
|
- mpv
|
||||||
|
state: 'present'
|
||||||
|
|
||||||
|
- name: 'Handle SUID binaries'
|
||||||
|
ansible.builtin.script:
|
||||||
|
cmd: ./remove_suid.sh
|
||||||
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue