infra-ansible
ansible script to ship alpine/ssh/wireguard
git clone https://9o.is/git/infra-ansible.git
apk.yml
(639B)
1 ---
2 - name: set repository
3 copy:
4 dest: /etc/apk/repositories
5 owner: root
6 group: root
7 mode: '0644'
8 content: |
9 {{ alpine_repositories | join('\n') }}
10
11 - name: update repositories and update all installed packages
12 apk:
13 update_cache: true
14 upgrade: true
15
16 - name: start and enable crond
17 service:
18 name: crond
19 enabled: true
20 state: started
21
22 - name: periodically upgrade packages
23 copy:
24 dest: /etc/periodic/daily/apk-autoupgrade
25 owner: root
26 group: root
27 mode: '0700'
28 content: |
29 #!/bin/sh
30 apk upgrade --update | sed "s/^/[`date`] /" >> /var/log/apk-autoupgrade.log
31