This PR builds off #25 , which adds a hardening role. 25 should be merged before this one is reviewed/merged.
This PR refactors our existing roles for setting up the planetary room server, but accomodating for changes from hardening. Mainly that we move things into the admin user's home directory, instead of installing to /root, and that we open up the firewall to any ports that need to be publicly accessible.
I am also, in these PR's, trying to set up a basic style and pattern for our ansible roles. They've been a bit of a mix between yaml and ini conventions. I move them all to yaml as the consistency will make it easier to scan. I also use the full name of each ansible module as it makes it easier to link the modules to documentation and be able to know what's built-in and what's community supported.
This PR builds off #25 , which adds a hardening role. 25 should be merged before this one is reviewed/merged.
This PR refactors our existing roles for setting up the planetary room server, but accomodating for changes from hardening. Mainly that we move things into the admin user's home directory, instead of installing to /root, and that we open up the firewall to any ports that need to be publicly accessible.
I am also, in these PR's, trying to set up a basic style and pattern for our ansible roles. They've been a bit of a mix between yaml and ini conventions. I move them all to yaml as the consistency will make it easier to scan. I also use the full name of each ansible module as it makes it easier to link the modules to documentation and be able to know what's built-in and what's community supported.