16 lines
664 B
YAML
16 lines
664 B
YAML
# Cloud-init already handles:
|
|
# - Package installation (fail2ban, curl, git, htop, ncdu, tree, tmux, etc.)
|
|
# - fail2ban service enabled and started
|
|
# - User creation (asxpi with sudo + docker, deploy with sudo + docker)
|
|
# - SSH hardening (key-only auth, prohibit root password)
|
|
# - Docker installation and configuration
|
|
# - Docker image pruning cron job (weekly at 3am Monday)
|
|
# - Directory structure creation
|
|
#
|
|
# This role is now for post-cloud-init configuration only
|
|
|
|
- name: Verify cloud-init completed successfully
|
|
command: cloud-init status --wait
|
|
register: cloud_init_status
|
|
changed_when: false
|
|
failed_when: "'done' not in cloud_init_status.stdout"
|