configurenode.yml

---
- hosts: all
  become: true
  vars_files:
    - ./group_vars/vars.yml

  tasks:
    - name: Install aptitude
      apt:
        name: aptitude
        state: latest
        update_cache: true

    - name: Setup passwordless sudo
      lineinfile:
        path: /etc/sudoers
        state: present
        regexp: '^%sudo'
        line: '%sudo ALL=(ALL) NOPASSWD: ALL'
        validate: '/usr/sbin/visudo -cf %s'

    - name: Create a new regular user with sudo privileges
      user:
        name: "{{ work_user }}"
        state: present
        groups: sudo
        append: true
        create_home: true

    - name: Remove MOTD Ubuntu News
      ansible.builtin.lineinfile:
        path: /etc/default/motd-news
        regexp: "^ENABLED"
        line: "ENABLED=0"

    - name: Set authorized key for remote user
      ansible.posix.authorized_key:
        user: "{{ work_user }}"
        state: present
        key: "{{ lookup('file', lookup('env','HOME') + '/.ssh/id_rsa.pub') }}"

    - name: Disable password authentication for root
      lineinfile:
        path: /etc/ssh/sshd_config
        state: present
        regexp: '^#?PermitRootLogin'
        line: 'PermitRootLogin no'

    - name: Update apt and install required system packages
      apt:
        pkg:
          - bat
          - curl
          - vim
          - git
          - ufw
        state: latest
        update_cache: true

    - name: UFW - Allow SSH connections
      community.general.ufw:
        rule: allow
        name: OpenSSH

    - name: UFW - Enable and deny by default
      community.general.ufw:
        state: enabled
        default: deny