Merge pull request #60 from ct-martin/devel

Start of Ansible Playbook

build-scripts/playbook.yml

@@ -0,0 +1,82 @@
+---
+- hosts: 127.0.0.1
+  tasks:
+    - name: Install packages
+      dnf: name="{{ item }}" state=present
+      become: true
+      with_items:
+        - nginx
+        - jenkins
+        - mock
+        - git
+        - openssh-server
+        - pungi
+        - rpm-sign
+        - certbot
+        - fedora-packager
+        - fedpkg
+        - fail2ban
+        - fail2ban-server
+        - iptables
+        - dnf-automatic
+        - mosh
+        - vim
+        - python-firewall
+        # need to get anaconda install class for TigerOS possibly
+        #- letsencrypt
+    - name: Allow HTTPS (nginx)
+      firewalld:
+        service: https
+        permanent: true
+        state: enabled
+    - name: Allow HTTP (nginx)
+      firewalld:
+        service: http
+        permanent: true
+        state: enabled
+    - name: Allow SSH access
+      firewalld:
+        service: ssh
+        permanent: true
+        state: enabled
+    - name: Allow 8080 (Jenkins)
+      firewalld:
+        port: 8080/tcp
+        permanent: true
+        state: enabled
+    - name: Allow Cockpit
+      firewalld:
+        service: cockpit
+        permanent: true
+        state: enabled
+    - name: Enable nginx service
+      systemd:
+        name: nginx
+        enabled: yes
+        state: started
+    - name: Enable Jenkins service
+      systemd:
+        name: jenkins
+        enabled: yes
+        state: started
+    - name: Enable Cockpit service
+      systemd:
+        name: cockpit
+        enabled: yes
+        state: started
+    - name: Enable sshd (openssh-server) service
+      systemd:
+        name: sshd
+        enabled: yes
+        state: started
+    - name: Enable fail2ban service
+      systemd:
+        name: fail2ban
+        enabled: yes
+        state: started
+    - name: Reload Firewall
+      command: firewall-cmd --reload
+      become: true
+    - name: Update packages
+      command: dnf update
+      become: true