aboutsummaryrefslogtreecommitdiffstatshomepage
diff options
context:
space:
mode:
authorEgor Tensin <Egor.Tensin@gmail.com>2023-08-20 22:58:29 +0200
committerEgor Tensin <Egor.Tensin@gmail.com>2023-08-20 22:58:29 +0200
commit0653c447dd213e794d77117b01ccccec0bbae068 (patch)
tree2e4fbe70d29f4471fafd2416e4e29fe9d139ff3d
parentv0.0.17 (diff)
downloadinfra-ansible-0653c447dd213e794d77117b01ccccec0bbae068.tar.gz
infra-ansible-0653c447dd213e794d77117b01ccccec0bbae068.zip
add ansible_managed comment to templates
-rw-r--r--roles/apt/templates/02periodic.j22
-rw-r--r--roles/apt/templates/50unattended-upgrades.j22
-rw-r--r--roles/firewall/templates/rules.v42
-rw-r--r--roles/firewall/templates/rules.v62
-rw-r--r--roles/letsencrypt/templates/certbot.ini2
-rw-r--r--roles/letsencrypt/templates/domain_list.txt2
-rw-r--r--roles/sshd/templates/sshd_config2
-rw-r--r--roles/wireguard/templates/wg0.conf2
8 files changed, 16 insertions, 0 deletions
diff --git a/roles/apt/templates/02periodic.j2 b/roles/apt/templates/02periodic.j2
index 0c26a8f..42e080d 100644
--- a/roles/apt/templates/02periodic.j2
+++ b/roles/apt/templates/02periodic.j2
@@ -1,3 +1,5 @@
+{{ ansible_managed | comment }}
+
APT::Periodic::Enable "1";
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "1";
diff --git a/roles/apt/templates/50unattended-upgrades.j2 b/roles/apt/templates/50unattended-upgrades.j2
index dfb2f9e..389bb2b 100644
--- a/roles/apt/templates/50unattended-upgrades.j2
+++ b/roles/apt/templates/50unattended-upgrades.j2
@@ -1,3 +1,5 @@
+{{ ansible_managed | comment }}
+
Unattended-Upgrade::Origins-Pattern {
"origin=${distro_id},codename=${distro_codename}";
"origin=${distro_id},codename=${distro_codename}-security";
diff --git a/roles/firewall/templates/rules.v4 b/roles/firewall/templates/rules.v4
index 38caa43..1bfeb94 100644
--- a/roles/firewall/templates/rules.v4
+++ b/roles/firewall/templates/rules.v4
@@ -1,3 +1,5 @@
+{{ ansible_managed | comment }}
+
*filter
# By default, drop incoming packets:
diff --git a/roles/firewall/templates/rules.v6 b/roles/firewall/templates/rules.v6
index ab1ce6d..2e94e25 100644
--- a/roles/firewall/templates/rules.v6
+++ b/roles/firewall/templates/rules.v6
@@ -1,3 +1,5 @@
+{{ ansible_managed | comment }}
+
*filter
# By default, drop incoming packets:
diff --git a/roles/letsencrypt/templates/certbot.ini b/roles/letsencrypt/templates/certbot.ini
index 84dc0f8..71095d6 100644
--- a/roles/letsencrypt/templates/certbot.ini
+++ b/roles/letsencrypt/templates/certbot.ini
@@ -1 +1,3 @@
+{{ ansible_managed | comment }}
+
dns_digitalocean_token = {{ digitalocean_token }}
diff --git a/roles/letsencrypt/templates/domain_list.txt b/roles/letsencrypt/templates/domain_list.txt
index 8cd60f8..d45c7f0 100644
--- a/roles/letsencrypt/templates/domain_list.txt
+++ b/roles/letsencrypt/templates/domain_list.txt
@@ -1,3 +1,5 @@
+{{ ansible_managed | comment }}
+
{% for domain in certificate_domains %}
{{ domain }}
{% endfor %}
diff --git a/roles/sshd/templates/sshd_config b/roles/sshd/templates/sshd_config
index 6963c88..abcf0d7 100644
--- a/roles/sshd/templates/sshd_config
+++ b/roles/sshd/templates/sshd_config
@@ -1,3 +1,5 @@
+{{ ansible_managed | comment }}
+
# Parameters that have sane defaults on Debian 11 are omitted.
{% set ssh_port = hostvars[inventory_hostname].ansible_port %}
diff --git a/roles/wireguard/templates/wg0.conf b/roles/wireguard/templates/wg0.conf
index aff1300..fca9a0b 100644
--- a/roles/wireguard/templates/wg0.conf
+++ b/roles/wireguard/templates/wg0.conf
@@ -1,3 +1,5 @@
+{{ ansible_managed | comment }}
+
[Interface]
PrivateKey = {{ wg_private_key }}
Address = {{ wg_addr4 }}, {{ wg_addr6 }}