diff --git a/.github/workflows/ansible-weekly-reconciliation.yml b/.github/workflows/ansible-weekly-reconciliation.yml deleted file mode 100644 index 3697ea2..0000000 --- a/.github/workflows/ansible-weekly-reconciliation.yml +++ /dev/null @@ -1,41 +0,0 @@ -name: Weekly Reconciliation - -on: - schedule: - - cron: "0 3 * * 0" -jobs: - ansible-apply: - runs-on: ubuntu-latest - steps: - - name: Checkout repository - uses: actions/checkout@v4 - with: - fetch-depth: 0 - - - name: Setup environment - uses: ./.github/actions/setup-env - - - name: Setup Ansible environment - id: setup_ansible_env - uses: ./.github/actions/setup-ansible-env - with: - vault-master-password: ${{ secrets.VAULT_MASTER_PASSWORD }} - ansible-user: ${{ secrets.ANSIBLE_USER }} - - - name: Apply Hardening Playbook - env: - VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }} - ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }} - SSH_AUTH_SOCK: ${{ steps.setup_ansible_env.outputs.ssh-auth-sock }} - run: | - cd ansible - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_login.yml - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_cis.yml --skip-tags roles::cis::suid - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_encryption.yml - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_microk8s.yml - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_gitea.yml - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_nextcloud.yml - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_wordpress.yml - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_m3uproxy.yml - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_monitoring.yml - sectool exec ansible-playbook -u $ANSIBLE_USER playbook_rustdesk.yml