add nginx, sshd, ssl roles

2026-09-20 22:14:56 +00:00
parent ba9e1a664f
commit c640406c10
131 changed files with 1535 additions and 780 deletions
@@ -0,0 +1,2 @@
+net.ipv4.ip_forward = 1
+net.ipv4.conf.all.route_localnet = 1
@@ -0,0 +1,6 @@
+net.ipv4.ip_forward = 1
+net.ipv4.conf.lo.rp_filter = 0
+net.ipv4.conf.all.rp_filter = 0
+net.bridge.bridge-nf-call-iptables = 0
+net.bridge.bridge-nf-call-ip6tables = 0
+net.bridge.bridge-nf-call-arptables = 0
@@ -1,7 +1,7 @@
 - name: deploy sysctl config
-  ansible.builtin.template:
-    src: sysctl.conf.j2
-    dest: "/etc/sysctl.d/99-custom.conf"
+  ansible.builtin.copy:
+    src: "{{ inventory_hostname }}/"
+    dest: "/etc/sysctl.d/"
    owner: root
    group: root
    mode: '0644'
@@ -1,3 +0,0 @@
-{% for key, value in sysctl.items() %}
-{{ key }} = {{ value }}
-{% endfor %}