Ansible playbook and files for bootstrapping a Linux install

Ansible files

# hosts.yaml

---
all:
  vars:
    ansible_connection: ssh
    ansible_user: ad
  children:
    workstations:
      hosts:
        apollo:
          ansible_host: 192.168.0.100
        loki:
          ansible_host: 192.168.0.110
    servers:
      hosts:
        athena:
          ansible_host: 192.168.0.120
        zima:
          ansible_host: 192.168.0.125
        korben:
          ansible_host: 192.168.0.225
    mini:
      hosts:
        potato:
          ansible_host: 192.168.0.200
        spud:
          ansible_host: 192.168.0.205
    remote:
      hosts:
        outpost:
          ansible_host: ...
        bastion:
          ansible_host: ...
    

# ansible.cfg

[defaults]
inventory = hosts.yaml
retry_files_enabled = False
private_key_file = ~/.ssh/id_rsa
ansible_python_interpreter=/usr/bin/python3
timeout=30

[ssh_connections]
pipelining = true

The playbook

# run.yaml

---
- name: Bootstrap Linux
  hosts: all
  become: true

  tasks:
# Add apt cache server
    - name: Copy the apt-cacher-ng client config
      copy:
        src: files/01proxy
        dest: /etc/apt/apt.conf.d/01proxy
        mode: "0644"

# Download packages
    - name: Update all installed packages
      apt:
        update_cache: yes
        upgrade: safe
        cache_valid_time: 86400

    - name: Install essential apt packages
      apt:
        name:
          - zsh
          - git
          - rsync
          - wget
          - curl
          - neofetch
          - smartmontools
        state: present
        install_recommends: yes

    - name: Install PC packages
      apt:
        deb: https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
        install_recommends: yes
      when: inventory_hostname in groups["pc"]

    - name: Install server-only packages
      apt:
        name:
          - samba
          - cifs-utils
          - nfs-kernel-server
          - cockpit
          - cockpit-pcp
        state: present
        install_recommends: yes
      when: inventory_hostname in groups["servers"]

# Samba
    - name: Copy custom SMB conf & backup default conf
      copy:
        src: files/smb.conf
        dest: /etc/samba/smb.conf
        mode: "0644"
        backup: yes
      when: inventory_hostname in groups["servers"]

    - name: Start the SMB daemon
      service:
        name: smbd
        state: started
      when: inventory_hostname in groups["servers"]

    - name: Start the NetBIOs daemon
      service:
        name: nmbd
        state: started
      when: inventory_hostname in groups["servers"]

    - name: Enable the SMB daemon
      systemd:
        name: smbd
        enabled: yes
      when: inventory_hostname in groups["servers"]

    - name: Enable the NetBIOS daemon
      systemd:
        name: nmbd
        enabled: yes
      when: inventory_hostname in groups["servers"]

# Copy dotfiles
    - name: Copy the Git config file
      copy:
        src: files/.gitconfig
        dest: /home/{{ ansible_user }}/.gitconfig

    - name: Copy custom Nano config & backup default config
      copy:
        src: files/nanorc
        dest: /etc/nanorc
        mode: "0644"
        backup: yes

    - name: Create the Neofetch config directory
      file:
        path: /home/{{ ansible_user }}/.config/neofetch
        state: directory

    - name: Copy the custom Neofetch config
      copy:
        src: files/neofetch.conf
        dest: /home/{{ ansible_user }}/.config/neofetch/config.conf

# Oh-My-Zsh
    - name: Download Oh My Zsh installation script
      get_url:
        url: https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh
        dest: /tmp/install_ohmyzsh.sh

    - name: Run Oh My Zsh installation script
      command: sh /tmp/install_ohmyzsh.sh --unattended
      register: ohmyzsh_result
      failed_when: "'FAILED' in ohmyzsh_result.stderr"
      args:
        chdir: "/home/{{ ansible_user }}"
      environment:
        HOME: "/home/{{ ansible_user }}"
        RUNZSH: "no"

    - name: Make sure oh-my-zsh plugins directory exists
      file:
        path: "/home/{{ ansible_user }}/.oh-my-zsh/custom/plugins"
        state: directory
        owner: "{{ ansible_user }}"
        group: "{{ ansible_user }}"

    - name: Clone zsh-syntax-highlighting plugin
      git:
        repo: https://github.com/zsh-users/zsh-syntax-highlighting.git
        dest: "/home/{{ ansible_user }}/.oh-my-zsh/custom/plugins/zsh-syntax-highlighting"
        update: yes

    - name: Clone zsh-autosuggestions plugin
      git:
        repo: https://github.com/zsh-users/zsh-autosuggestions.git
        dest: "/home/{{ ansible_user }}/.oh-my-zsh/custom/plugins/zsh-autosuggestions"
        update: yes

    - name: Clone zsh-completions plugin
      git:
        repo: https://github.com/zsh-users/zsh-completions.git
        dest: "/home/{{ ansible_user }}/.oh-my-zsh/custom/plugins/zsh-completions"
        update: yes

    - name: Clone zsh-history-substring-search plugin
      git:
        repo: https://github.com/zsh-users/zsh-history-substring-search.git
        dest: "/home/{{ ansible_user }}/.oh-my-zsh/custom/plugins/zsh-history-substring-search"
        update: yes

    - name: Clone you-should-use plugin
      git:
        repo: https://github.com/MichaelAquilina/zsh-you-should-use.git
        dest: "/home/{{ ansible_user }}/.oh-my-zsh/custom/plugins/you-should-use"
        update: yes

    - name: Make sure oh-my-zsh themes directory exists
      file:
        path: "/home/{{ ansible_user }}/.oh-my-zsh/custom/themes"
        state: directory
        owner: "{{ ansible_user }}"
        group: "{{ ansible_user }}"

    - name: Clone powerlevel10k repo
      git:
        repo: https://github.com/romkatv/powerlevel10k.git
        dest: /home/{{ ansible_user }}/.oh-my-zsh/custom/themes/powerlevel10k
        update: yes

    - name: Copy aliases file
      copy:
        src: files/.aliases
        dest: /home/{{ ansible_user }}/.aliases

    - name: Copy zsh config & backup existing file
      copy:
        src: files/.zshrc
        dest: /home/{{ ansible_user }}/.zshrc
        backup: yes

    - name: Change default shell to Zsh
      user:
        name: "{{ ansible_user }}"
        shell: /bin/zsh

# Final steps
    - name: Add IPs of local machines to /etc/hosts
      lineinfile:
        dest: /etc/hosts
        regexp: '.*{{ item }}$'
        line: "{{ hostvars[item].ansible_host }} {{item}}"
        state: present
      when: "hostvars[item].ansible_host is defined and 'remote' not in group_names"
      with_items: "{{ groups.all }}"

    - name: Clean cache & remove unnecessary dependencies
      apt:
        autoclean: yes
        autoremove: yes

    - name: Check if reboot is required
      stat:
        path: /var/run/reboot-required
      register: reboot_required_file

    - name: Reboot if required
      reboot:
        msg: Rebooting due to a kernel update
      when: reboot_required_file.stat.exists