Merge pull request #18 from juwi/feature/common

Add common role:

playbooks/install_palava_web.yml

@@ -3,4 +3,5 @@
 - hosts: all
   remote_user: root
   roles:
+    - common
     - palava-web

roles/common/handlers/main.yaml

@@ -0,0 +1,4 @@
+- name: Restart sshd
+  service:
+    name: sshd
+    state: restarted

roles/common/tasks/main.yml

@@ -0,0 +1,4 @@
+---
+- include: upgrade.yml
+- include: packages.yml
+- include: ssh.yml

roles/common/tasks/packages.yml

@@ -0,0 +1,19 @@
+- name: Install common packages
+  apt:
+    name:
+      - apt-transport-https
+      - apache2-utils
+      - fail2ban
+      - git
+      - nginx
+      - unattended-upgrades
+      - vim
+    state: present
+
+- name: Make sure some packages are not installed
+  apt:
+    name:
+      - apache2
+      - cups
+      - telnet
+    state: absent

roles/common/tasks/ssh.yml

@@ -0,0 +1,6 @@
+- name: Disable root login without key
+  lineinfile:
+    dest: "/etc/ssh/sshd_config"
+    regexp: "^#?PermitRootLogin "
+    line: "PermitRootLogin without-password"
+  notify: "Restart sshd"

roles/common/tasks/upgrade.yml

@@ -0,0 +1,6 @@
+---
+- name: Upgrade packages
+  apt:
+    upgrade: 'yes'
+    update_cache: yes
+    cache_valid_time: 86400