[Ansible] Ubuntu 20.04 OS 기본 설정

# ./site.yaml
---
- name: Update packages & Modify some configurations
  hosts: test
  become: yes
  vars_files:
  - "./VARS/vars.yaml"
  tasks:
    # Server Updates
    - name: Upgrade the OS (apt-get dist-upgrade)
      apt:
        upgrade: full
    - name: Run the equivalent of "apt-get update" as a separate step
      apt:
        update_cache: yes

    # This module does NOT modify /etc/hosts
    - name: Set a hostname
      ansible.builtin.hostname:
        name: "{{ hostname }}{{groups['test'].index(inventory_hostname) + 1}}"

    - name: Insert "Hostname" in /etc/hosts
      ansible.builtin.lineinfile:
        path: /etc/hosts
        insertafter: '^127.0.0.1 '
        line: "{{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} {{ hostname }}{{groups['test'].index(inventory_hostname) + 1}}"

    - name: Insert/Update "profile" configuration block in /etc/profile
      blockinfile:
        path: /etc/profile
        block: |
            HISTTIMEFORMAT="%Y-%m-%d [%H:%M:%S] " # history 포맷 설정
            export HISTTIMEFORMAT
            HISTFILESIZE=10000 # history 기록 사이즈 및 수 설정
            HISTSIZE=10000

            TMOUT=600 # 터미널에서 아무런 작업이 없을 시 세션 종료 설정(초)
            export TMOUT
    
    - name: Set timezone to Asia/Seoul
      community.general.timezone:
        name: Asia/Seoul

    - name: Insert/Update "profile" configuration block in /etc/profile
      blockinfile:
        path: /etc/rsyslog.d/50-default.conf
        block: |
            *.=info;*.=notice;*.=warn;\ 
                auth,authpriv.none;\
                cron,daemon.none;\
                mail,news.none          -/var/log/messages

    - name: Restart service rsyslog, in all cases, also issue daemon-reload to pick up config changes
      ansible.builtin.systemd:
        state: restarted
        daemon_reload: yes
        name: rsyslog

    - name: Ensure system records all attempts by users on the system to execute the su command in /var/log/sulog
      ansible.builtin.lineinfile:
        path: /etc/login.defs
        insertafter: '^#SULOG_FILE'
        line: SULOG_FILE     /var/log/sulog

    - name: Creating a file with content
      copy:
        dest: "/etc/logrotate.d/rsyslog"
        content: "{{rsyslog}}"

    - name: Excecute daily at 00:00 AM
      ansible.builtin.lineinfile:
        path: /etc/crontab
        line: 0 0 * * * root logrotate -f /etc/logrotate.d/rsyslog

    # Swap Memory
    - name: Set swap_file variable
      set_fact:
        swap_file: "{{swap_file_path}}"
      tags:
        - swap.set.file.path

    - name: Check if swap file exists
      stat:
        path: "{{swap_file}}"
      register: swap_file_check
      tags:
        - swap.file.check

    - name: Create swap file
      command: fallocate -l {{swap_file_size}} {{swap_file}}
      when: not swap_file_check.stat.exists
      tags:
        - swap.file.create

    - name: Change swap file permissions
      file: path="{{swap_file}}"
            owner=root
            group=root
            mode=0600
      tags:
        - swap.file.permissions

    - name: Format swap file
      command: "mkswap {{swap_file}}"
      when: not swap_file_check.stat.exists
      tags:
        - swap.file.mkswap

    - name: Write swap entry in fstab
      mount: name=none
            src={{swap_file}}
            fstype=swap
            opts=sw
            passno=0
            dump=0
            state=present
      tags:
        - swap.fstab

    - name: Turn on swap
      command: swapon -a
      when: not swap_file_check.stat.exists
      tags:
        - swap.turn.on

    - name: Set swappiness
      sysctl:
        name: vm.swappiness
        value: "{{swappiness}}"
      tags:
        - swap.set.swappiness


    - name: Reboot a slow machine that might have lots of updates to apply
      reboot:
        reboot_timeout: 60