Added common ansible role

common/tasks/apt.yml

@@ -0,0 +1,4 @@
+---
+- name: update the package list
+  apt: update_cache=yes
+

common/tasks/apticron.yml

@@ -0,0 +1,19 @@
+---
+- name: ensure apticron packages are installed
+  apt:
+    pkg: "{{ packages }}"
+    state: latest
+    update_cache: yes
+    cache_valid_time: 600
+  vars:
+    packages:
+      - apticron
+
+- name: configure apticron
+  template:
+    src: etc/apticron/apticron.conf.j2
+    dest: /etc/apticron/apticron.conf
+    owner: root
+    group: root
+    mode: 0644
+

common/tasks/disk-check.yml

@@ -0,0 +1,9 @@
+---
+- name: set up check disk space cron script
+  template:
+    src: etc/cron.hourly/check-disk-space.sh.j2
+    dest: /etc/cron.hourly/check-disk-space.sh
+    owner: root
+    group: root
+    mode: 0750
+

common/tasks/fail2ban.yml

@@ -0,0 +1,11 @@
+---
+- name: install fail2ban
+  apt:
+    name: fail2ban
+    state: latest
+    update_cache: yes
+- name: enable fail2ban
+  service:
+    name: fail2ban
+    enabled: yes
+    started: started

common/tasks/main.yml

@@ -0,0 +1,17 @@
+---
+- include: apt.yml
+  tags:
+    - apt
+- include: apticron.yml
+  tags:
+    - apticron
+- include: disk-check.yml
+  tags:
+    - disk
+- include: ufw.yml
+  tags:
+    - firewall
+- include: fail2ban.yml
+  tags:
+    - firewall
+- include: tools.yml

common/tasks/tools.yml

@@ -0,0 +1,19 @@
+---
+- name: ensure all tools packages are installed
+  apt:
+    pkg: "{{ packages }}"
+    state: latest
+    update_cache: yes
+    cache_valid_time: 600
+  vars:
+    packages:
+      - curl
+      - debsums
+      - iperf3
+      - mosh
+      - net-tools
+      - needrestart
+      - sqlite3
+      - sudo
+      - tmux
+

common/tasks/ufw.yml

@@ -0,0 +1,8 @@
+---
+- name: allow ssh through firewall
+  ufw:
+    name: OpenSSH
+    rule: allow
+- name: enable ufw firewall
+  command:
+    cmd: ufw enable