add more shit

Signed-off-by: Frank Villaro-Dixon <frank@villaro-dixon.eu>

defaults/main.yml

@@ -9,3 +9,7 @@ ssh_keys:
 
 
 ansible_cfg_repo: infra/ansible-common
+
+journal_volatile: true
+
+setup_ntp: true

handlers/main.yml

@@ -3,6 +3,10 @@
     name: systemd-timesyncd
     state: restarted
 
+- name: restart systemd-journald
+  systemd:
+    name: systemd-journald
+    state: restarted
 
 - name: restart sshd
   systemd:

tasks/journald.yml

@@ -0,0 +1,23 @@
+# Make the systemd journal volatile (i.e. don't store it to disk)
+
+# only do that on raspberry Pis
+
+
+- name: Set systemd journal to volatile
+  ini_file:
+    path: /etc/systemd/journald.conf
+    section: Journal
+    option: Storage
+    value: volatile
+  notify: restart systemd-journald
+  when: ansible_architecture == 'armv7l' and vars.journal_volatile
+
+
+- name: Set systemd journal max usage
+  ini_file:
+    path: /etc/systemd/journald.conf
+    section: Journal
+    option: RuntimeMaxUse
+    value: 100M
+  notify: restart systemd-journald
+  when: ansible_architecture == 'armv7l' and vars.journal_volatile

tasks/main.yml

@@ -1,4 +1,7 @@
+- import_tasks: journald.yml
 - import_tasks: ntp.yml
 - import_tasks: ssh.yml
 - import_tasks: remove_alarm.yml
 - import_tasks: motd.yml
+- import_tasks: setup_backup.yml
+- import_tasks: pkgs.yml

tasks/ntp.yml

@@ -5,4 +5,5 @@
     option: NTP
     value: "{{ vars.ntp_servers | join(' ') }}"
   notify: restart systemd-timesyncd
+  when: vars.setup_ntp is true
 

tasks/pkgs.yml

@@ -0,0 +1,13 @@
+- name: Install some necessary pkgs
+  ansible.builtin.package:
+    name: "{{ item }}"
+    state: present
+  with_items:
+  - vim
+  - tcpdump
+  - curl
+  - wget
+  - iftop
+  - iotop
+  - dfc
+  - htop

tasks/setup_backup.yml

@@ -0,0 +1,4 @@
+- name: Install rsync for backuping
+  ansible.builtin.package:
+    name: rsync
+    state: present