39 lines
915 B
YAML
39 lines
915 B
YAML
---
|
|
- name: Configure the Hack Manhattan OpenBSD router
|
|
hosts: foo.hackmanhattan.com
|
|
|
|
vars_files:
|
|
- vars/users.yaml
|
|
- vars/sysctl.yaml
|
|
- vars/network.yaml
|
|
- vars/dns.yaml
|
|
- vars/static_hosts.yaml
|
|
- vars/firewall.yaml
|
|
- vars/notifications.yaml
|
|
- vars/proxy.yaml
|
|
|
|
tasks:
|
|
- name: Check if secrets are available
|
|
local_action: stat path=vars/secret.yaml
|
|
register: secret
|
|
|
|
- name: Include secret vars (not included in a public repo)
|
|
include_vars:
|
|
file: vars/secret.yaml
|
|
when: secret.stat.exists == true
|
|
|
|
- name: Include more complicated services
|
|
include: "{{ include_item }}"
|
|
with_items:
|
|
- tasks/users.yaml
|
|
- tasks/sysctl.yaml
|
|
- tasks/network.yaml
|
|
- tasks/dhcpd.yaml
|
|
- tasks/rad.yaml
|
|
- tasks/unbound.yaml
|
|
- tasks/miniupnpd.yaml
|
|
- tasks/pf.yaml
|
|
- tasks/relayd.yaml
|
|
loop_control:
|
|
loop_var: include_item
|