my learn ansible

in this learn i have 2 linux machine, debian 9 and centos 8, using custom hosts file as inventory

cat hosts

centos 8 come with /usr/bin/python3 not /usr/bin/python so we need add ansible_python_interpreter="/usr/bin/python3" in cent8 line

execute with command

cd ansible-learn
ansible server -m ping -i hosts
ansible deb -m ping -i hosts
ansible cent -m ping -i hosts

this section, we will choose deb9, single host, not group server
this code just update via apt, i comment centos, becouse centos 8 use python3 as default and its uncompatible with ansible yum wich using python2

this section we need enable authorized_keys to user root sudo cp .ssh /root/ -R

ansible-playbook update.yml -l deb9

using docker-var.yml to store value and calling from install-docker.yml

ansible-playbook install-docker.yml -l deb9

now lets install ufw

ansible-playbook install-ufw.yml -l deb9

config ssh http https if you want check systax, add --check options

ansible-playbook ufw-enable-port.yml -i hosts.dev --check
ansible-playbook ufw-enable-port.yml -i hosts.dev

secured again with fail2ban

ansible-playbook install-fail2ban.yml -l deb9

we can read who connect to server with command sudo tail -f /var/log/auth.log

and we can view realtime from fail2ban sudo tail -f /var/log/fail2ban.log

clone repo with ansible-playbook