ansible/config.yml

---
- name: Sync Configuration Files
  hosts: rhel
  become: yes
  vars:
    worker_limit: 1024  # Global variable used in the template

  tasks:
    - name: Root password
      ansible.builtin.import_tasks: tasks/rootpass.yml

    - name: Create Directories
      file:
        path: '{{ item.directory }}'
        state: directory
        mode: "{{ item.mode | default('0755') }}"
        owner: root
        group: root
      loop:
        - { directory: "/var/backups" }
        - { directory: "/opt/atclab/bin" }
        - { directory: "/var/user", mode: "1777" }

    - name: Copy etc configs
      copy:
        src: '{{ item.src }}'
        dest: '{{ item.dest }}'
        owner: root
        group: root
        mode: "{{ item.mode | default('0644') }}"
      loop:
        - { src: templates/users.autofs, dest: /etc/auto.master.d/users.autofs }
        - { src: templates/auto.users, dest: /etc/auto.users }
        - { src: templates/sssd.conf, dest: /etc/sssd/conf.d/sssd.conf, mode: '0600' }

#     - name: Deploy sssd.conf
#       template:
#         src: templates/sssd.conf
#         dest: /etc/sssd/conf.d/sssd.conf
#         owner: root
#         group: root
#         mode: '0600'
#       notify: Restart sssd  # This triggers the handler only if the file changes

    - name: Deploy ldap.conf
      template:
        src: templates/ldap.conf
        dest: /etc/openldap/ldap.conf
        owner: root
        group: root
        mode: '0644'

    - name: Deploy sshd.conf
      template:
        src: templates/sshd.conf
        dest: /etc/ssh/sshd_config.d/60_lab.conf
        owner: root
        group: root
        mode: '0600'

    - name: Deploy ssh.conf
      template:
        src: templates/ssh.conf
        dest: /etc/ssh/ssh_config.d/60_lab.conf
        owner: root
        group: root
        mode: '0644'

    - name: Deploy sudoers
      template:
        src: templates/lab-sudo
        dest: /etc/sudoers.d/sudogroup
        owner: root
        group: root
        mode: '0440'

    - name: Deploy gitconfig
      template:
        src: templates/gitconfig
        dest: /etc/gitconfig
        owner: root
        group: root
        mode: '0644'

    - name: Copy profile configs
      copy:
        src: etc/profile.d/
        dest: /etc/profile.d/
        owner: root
        group: root
        mode: '0644'

    - name: Copy etc configs
      copy:
        src: '{{ item.src }}'
        dest: '{{ item.dest }}'
        owner: root
        group: root
        mode: '0644'
      loop:
        - { src: templates/users.autofs, dest: /etc/auto.master.d/users.autofs }
        - { src: templates/auto.users, dest: /etc/auto.users }

    - name: Copy bin scripts
      copy:
        src: bin/
        dest: /opt/atclab/bin
        owner: root
        group: root
        mode: '0755'

    - name: Enable AutoFS
      ansible.builtin.systemd:
        name: autofs
        state: started
        enabled: yes

  handlers:
    - name: Restart sssd
      service:
        name: sssd
        state: restarted