asvVMServerTemplate.yml

---

- name: Load roles concerning asvVMServerTemplate
  hosts: asvVMServerTemplate
  become_user: root
  become: yes
  roles:
    ### Base archVMServer
    - { role: ansible-guest, tags: ansible-guest }
    - { role: ssh, tags: ssh }
    # - { role: makepkg, tags: makepkg }
    # - { role: aur-cli, tags: aur-cli }
    - { role: pacman, tags: pacman }
    - { role: qemu-guest, tags: qemu-guest }
    - { role: cloud-init, tags: cloud-init }
    - { role: bash, tags: bash }
    # - { role: fish, tags: fish }
    - { role: refind, tags: refind }
    - { role: rngd, tags: rngd }
    - { role: systemd-resolved, tags: systemd-resolved }
    - { role: auditd, tags: auditd }
    - { role: systemd-journald, tags: systemd-journald }
    # - { role: logrotate, tags: logrotate }
    - { role: host, tags: host }
    # - { role: fail2ban, tags: fail2ban }
    - { role: locale, tags: locale }
    - { role: sudo, tags: sudo }
    - { role: mkinitcpio, tags: mkinitcpio }
    - { role: linux-kernel, tags: linux-kernel }
    - { role: irqbalance, tags: irqbalance }
    # - { role: watchdog, tags: watchdog }
    # - { role: systemd-zram-generator, tags: systemd-zram-generator }
    - { role: man-page, tags: man-page }
    # - { role: trash-cli, tags: trash-cli }
    # - { role: bpytop, tags: bpytop }
    # - { role: tree, tags: tree }
    - { role: neovim, tags: neovim }
    # - { role: curl, tags: curl }

    ### Server specific
    # - { role: aur-cli-clean, tags: aur-cli }
    # - { role: akpvmserver_template_cleanup, tags: akpvmserver_template_cleanup }

# https://github.com/archlinux/infrastructure
# https://github.com/archlinux/infrastructure/tree/master/roles/common

# - logrotate
# - auditd
# - journald
# - fail2ban
# - smartmontools
# - /etc/motd
# - https://wiki.archlinux.org/index.php/security#Kernel_lockdown_mode
# - firewalld
# - bash
# - systemd-timesyncd
# - mlocate
# - syslog-ng
# - install systemd-swap zram swap
# - https://github.com/archlinux/infrastructure/tree/master/roles/sshd
# - https://github.com/archlinux/infrastructure/blob/master/roles/sudo/tasks/main.yml

# - name: install sysadmin tools
#   pacman:
#     state: present
#     name:
#       - lsof
#       - psmisc
#       - htop
#       - nethogs
#       - iftop
#       - rsync
#       - tmux
#       - mtr
#       - sshfs
#       - dfc
#       - tree
#       - dstat
#       - dmidecode
#       - net-tools
#       - ncdu
#       - nmap
#       - sysstat
#       - iptraf-ng
#       - vnstat
#       - screen
#       - tcpdump
#       - sudo
#       - glances
#       - cloud-utils

# - name: install misc utils
#   pacman:
#     state: present
#     name:
#       - zsh
#       - colordiff
#       - multitail
#       - httpie
#       - the_silver_searcher
#       - ripgrep
#       - ipcalc
#       - calc
#       - wget
#       - neovim
#       - python-pynvim
#       - vim
#       - parallel
#       - bash-completion
#       - socat
#       - pv
#       - ccze
#       - rxvt-unicode-terminfo
#       - termite-terminfo
#       - p7zip
#       - unzip
#       - setconf
#       - fish
#       - bat
#       - hexyl
#       - stow
#       - fzf
#       - fasd
#       - ranger
#       - vifm
#       - git
#       - perl-term-readkey


# - apptocheck:
#      - devtools
#       - zsh
#       - git
#       - subversion
#       - mercurial
#       - bzr
#       - ruby
#       - tig
#       - colordiff
#       - pkgdiff
#       - elinks
#       - appstream-generator
#       - ---
#       -       - lsof
#       - psmisc
#       - htop
#       - nethogs
#       - iftop
#       - rsync
#       - tmux
#       - mtr
#       - sshfs
#       - dfc
#       - tree
#       - dstat
#       - dmidecode
#       - net-tools
#       - ncdu
#       - nmap
#       - sysstat
#       - iptraf-ng
#       - vnstat
#       - screen
#       - tcpdump
#       - sudo
#       - glances
#       - cloud-utils
#       - ----
#       -       - zsh
#       - colordiff
#       - multitail
#       - httpie
#       - the_silver_searcher
#       - ripgrep
#       - cloc
#       - tokei
#       - ipcalc
#       - calc
#       - wget
#       - neovim
#       - python-pynvim
#       - vim
#       - parallel
#       - bash-completion
#       - socat
#       - pv
#       - ccze
#       - rxvt-unicode-terminfo
#       - termite-terminfo
#       - p7zip
#       - unzip
#       - setconf
#       - fish
#       - bat
#       - hexyl
#       - stow
#       - fzf
#       - fasd
#       - ranger
#       - vifm
#       - git
#       - perl-term-readkey