Encryption and major changes

2024-09-28 23:12:19 +02:00
parent 1f060541c3
commit 6248286ad2
159 changed files with 153 additions and 129 deletions
@@ -0,0 +1,47 @@
+---
+- name: Configure systemd timesyncd
+  become: true
+  ansible.builtin.template:
+    src: etc/systemd/timesyncd.conf.j2
+    dest: /etc/systemd/timesyncd.conf
+    backup: true
+    mode: "0644"
+    owner: root
+    group: root
+  notify:
+    - Reload systemd
+  tags:
+    - systemd
+    - timesyncd
+    - CIS-UBUNTU2004-2.1.1.1
+    - CIS-UBUNTU2004-2.1.1.2
+
+- name: Stat timesyncd status
+  ansible.builtin.command: systemctl status systemd-timesyncd
+  register: timesyncd_status
+  changed_when: false
+  failed_when: false
+  tags:
+    - systemd
+    - timesyncd
+    - CIS-UBUNTU2004-2.1.1.1
+    - CIS-UBUNTU2004-2.1.1.2
+
+- name: Stat timedatectl show
+  ansible.builtin.command: timedatectl show
+  register: timedatectl_show
+  changed_when: timedatectl_show.stdout.find('NTPSynchronized=yes') == -1 and timesyncd_status.rc == 0
+  tags:
+    - systemd
+    - timesyncd
+    - CIS-UBUNTU2004-2.1.1.1
+    - CIS-UBUNTU2004-2.1.1.2
+
+- name: Run timedatectl set-ntp
+  become: true
+  ansible.builtin.command: timedatectl set-ntp true # noqa no-changed-when
+  when: timedatectl_show.stdout.find('NTPSynchronized=yes') == -1 and timesyncd_status.rc == 0
+  tags:
+    - systemd
+    - timesyncd
+    - CIS-UBUNTU2004-2.1.1.2