formatting

galaxy.yml

@@ -2,9 +2,12 @@
 
 namespace: uumas
 name: general
+description: General roles
 version: 0.5.10
 readme: README.md
 authors:
   - uumas
 license_file: 'LICENSE'
 repository: 'https://git.uumas.fi/uumas/ansible-general'
+tags:
+  - linux

meta/runtime.yml

@@ -1,4 +1,3 @@
 ---
 
 requires_ansible: ">=2.10"
-

roles/apt_repository/tasks/main.yml

@@ -23,9 +23,10 @@
     state: directory
     mode: "0755"
 
-- name: Remove legacy {{ repo_name }} repo
+- name: Remove legacy repo {{ repo_name }}
   ansible.builtin.apt_repository:
-    repo: "deb {{ '[' + repo_options | join(' ') + '] ' if repo_options | length > 0 else '' }}{{ repo_url }} {{ repo_suite }} {{ repo_components | join(' ') }}"
+    repo: >
+      deb {{ '[' + repo_options | join(' ') + '] ' if repo_options | length > 0 else '' }}{{ repo_url }} {{ repo_suite }} {{ repo_components | join(' ') }}
     filename: "{{ repo_name }}"
     state: absent
 

roles/caddy/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 
-- name: reload caddy
+- name: Reload caddy
-  systemd:
+  ansible.builtin.systemd:
     name: caddy
     state: reloaded

roles/caddy/tasks/main.yml

@@ -12,11 +12,11 @@
       - main
 
 - name: Install caddy
-  apt:
+  ansible.builtin.apt:
     name: caddy
 
 - name: Remove default settings from caddyfile
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/caddy/Caddyfile
     marker: "{mark}"
     marker_begin: ':80 {'
@@ -26,7 +26,7 @@
     backup: true
 
 - name: Put caddy general config in place
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/caddy/Caddyfile
     marker: "# {mark} ANSIBLE MANAGED BLOCK general"
     block: |
@@ -35,4 +35,4 @@
       }
     validate: 'caddy validate --config %s --adapter caddyfile'
     backup: true
-  notify: reload caddy
+  notify: Reload caddy

roles/locale/defaults/main.yml

@@ -3,7 +3,7 @@
 gen_locales:
   - en_US.UTF-8
   - en_GB.UTF-8
- 
+
 lang: en_US.UTF-8
 lc_messages: "{{ lang }}"
 language: "en_US:en"

roles/locale/tasks/main.yml

@@ -1,20 +1,20 @@
 ---
 
-- name: Include variables for {{ ansible_os_family }} family
+- name: Include variables for os family {{ ansible_os_family }}
-  include_vars: "{{ ansible_os_family }}.yml"
+  ansible.builtin.include_vars: "{{ ansible_os_family }}.yml"
 
 - name: Install locales package
-  package:
+  ansible.builtin.package:
     name: "{{ locale_package }}"
   when: locale_package is defined
 
 - name: Generate locales
-  locale_gen:
+  community.general.locale_gen:
     name: "{{ item }}"
   loop: "{{ gen_locales }}"
 
 - name: Put default locale config in place
-  template:
+  ansible.builtin.template:
     src: locale.j2
     dest: "{{ locale_config }}"
-    mode: 0644
+    mode: '0644'

roles/packages/tasks/apt.yml

@@ -1,20 +1,21 @@
 ---
 
 - name: Ensure packages defined in install_packages are installed
-  apt:
+  ansible.builtin.apt:
     name: "{{ install_packages }}"
     state: present
     update_cache: true
 
-- block:
+- name: Ensure packages defined in backports_packages are installed
+  when: backports_packages is defined
+  block:
     - name: Enable backports
-      apt_repository:
+      ansible.builtin.apt_repository:
         repo: "deb http://deb.debian.org/debian {{ ansible_distribution_release }}-backports main"
         filename: backports
 
     - name: Install backports packages
-      apt:
+      ansible.builtin.apt:
         name: "{{ backports_packages }}"
         state: present
         default_release: "{{ ansible_distribution_release }}-backports"
-  when: backports_packages is defined

roles/packages/tasks/main.yml

@@ -1,15 +1,15 @@
 ---
 
 - name: Include tasks for apt as package manager
-  include_tasks: apt.yml
+  ansible.builtin.include_tasks: apt.yml
   when: ansible_pkg_mgr == 'apt'
 
 - name: Include tasks for other package manager
-  include_tasks: other.yml
+  ansible.builtin.include_tasks: other.yml
   when: ansible_pkg_mgr != 'apt'
 
 - name: Ensure packages defined in delete_packages not installed
-  package:
+  ansible.builtin.package:
     name: "{{ delete_packages }}"
     state: absent
   when: delete_packages is defined

roles/packages/tasks/other.yml

@@ -1,6 +1,6 @@
 ---
 
 - name: Ensure packages defined in install_packages are installed
-  package:
+  ansible.builtin.package:
     name: "{{ install_packages }}"
     state: present

roles/prometheus_node_exporter/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 
-- name: restart prometheus-node-exporter
+- name: Restart prometheus-node-exporter
-  systemd:
+  ansible.builtin.systemd:
     name: prometheus-node-exporter
     state: restarted

roles/prometheus_node_exporter/tasks/main.yml

@@ -1,12 +1,12 @@
 ---
 
 - name: Install prometheus node exporter
-  apt:
+  ansible.builtin.apt:
     name: prometheus-node-exporter
 
 - name: Set prometheus options in /etc/default/prometheus-node-exporter
-  template:
+  ansible.builtin.template:
     src: templates/prometheus-node-exporter.j2
     dest: /etc/default/prometheus-node-exporter
-    mode: 0644
+    mode: '0644'
-  notify: restart prometheus-node-exporter
+  notify: Restart prometheus-node-exporter

roles/reverse_proxy/tasks/main.yml

@@ -1,29 +1,30 @@
 ---
 
 - name: Deprecation warning
-  debug:
+  ansible.builtin.debug:
     msg: "uumas.general.reverse_proxy is deprecated. You should switch to uumas.general.vhost with vhost_type: reverse_proxy"
 
-- block:
+- name: Legacy proxy_target handling
+  when: proxy_target is defined and proxy_target_port is not defined
+  block:
     - name: Split legacy proxy_target to protocol and target
-      set_fact:
+      ansible.builtin.set_fact:
         proxy_target_split_protocol: "{{ proxy_target.split('://') }}"
     - name: Split target further to host and port
-      set_fact:
+      ansible.builtin.set_fact:
         proxy_target_split_host: "{{ (proxy_target_split_protocol | last).split(':') }}"
     - name: Set host and port variables
-      set_fact:
+      ansible.builtin.set_fact:
         proxy_target_host: "{{ proxy_target_split_host[0] }}"
         proxy_target_port: "{{ proxy_target_split_host[1] }}"
 
     - name: Set proxy_target_protocol based on proxy_target
-      set_fact:
+      ansible.builtin.set_fact:
         proxy_target_protocol: "{{ proxy_target_split_protocol[0] }}"
       when: proxy_target_split_protocol | length == 2
-  when: proxy_target is defined and proxy_target_port is not defined
 
-- name: configure vhost for reverse proxy
+- name: Configure vhost for reverse proxy
-  include_role:
+  ansible.builtin.include_role:
     name: vhost
   vars:
     vhost_type: reverse_proxy

roles/ssh/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 
-- name: restart ssh
+- name: Restart ssh
-  systemd:
+  ansible.builtin.systemd:
     name: ssh
     state: restarted

roles/ssh/tasks/main.yml

@@ -1,13 +1,13 @@
 ---
 
 - name: Ensure sshd config options set correctly
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: /etc/ssh/sshd_config
     regexp: "^#?{{ item.key }} .*$"
     line: "{{ item.key }} {{ item.value }}"
     state: present
     validate: '/usr/sbin/sshd -t -f %s'
-  notify: restart ssh
+  notify: Restart ssh
   with_dict:
     PermitRootLogin: 'prohibit-password'
     PasswordAuthentication: "{{ 'yes' if sshd_password_auth else 'no' }}"

roles/users/tasks/main.yml

@@ -1,11 +1,11 @@
 ---
 
 - name: Ensure sudo is installed
-  package:
+  ansible.builtin.package:
     name: sudo
 
 - name: Fail if removing the current user
-  fail:
+  ansible.builtin.fail:
     msg: Refusing to delete the user used to run this play
   when:
     - item.name == ansible_user_id
@@ -15,7 +15,7 @@
   become: false
 
 - name: Ensure users in correct state
-  user:
+  ansible.builtin.user:
     name: "{{ item.name }}"
     password: "{{ item.password }}"
     shell: "{{ item.shell | default('/bin/bash') }}"
@@ -25,14 +25,14 @@
   loop: "{{ users }}"
 
 - name: Set ssh authorized keys for users
-  authorized_key:
+  ansible.posix.authorized_key:
     user: "{{ item.name }}"
     key: "{{ item.ssh_pubkey }}"
   when: item.state | default('present') == 'present'
   loop: "{{ users }}"
 
 - name: Disable login as root with ssh key
-  file:
+  ansible.builtin.file:
     path: /root/.ssh/authorized_keys
     state: absent
   when: ansible_user | default('') != 'root'

roles/vhost/tasks/caddy.yml

@@ -1,7 +1,7 @@
 ---
 
 - name: Add caddy vhost config
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/caddy/Caddyfile
     marker: "# {mark} ANSIBLE MANAGED BLOCK {{ vhost_id }}"
     block: |

roles/vhost/tasks/main.yml

@@ -1,7 +1,7 @@
 ---
 
 - name: Fail if redirect_target is a relative path and redirect_preserve_path is true
-  fail:
+  ansible.builtin.fail:
     msg: redirect_target must be an absolute url or absolute path if redirect_preserve_path is true
   when:
     - redirect_preserve_path
@@ -9,17 +9,17 @@
     - not redirect_target.startswith('/')
 
 - name: Fail if redirect_tartget ends with / and redirect_preserve_path is true
-  fail:
+  ansible.builtin.fail:
     msg: redirect_target must not end with / if redirect_preserve_path is true
   when:
     - redirect_preserve_path
     - redirect_target.endswith('/')
 
 - name: Reset vhost_locations_all
-  set_fact:
+  ansible.builtin.set_fact:
     vhost_locations_all: []
 - name: Set vhost_locations_all reverse proxies
-  set_fact:
+  ansible.builtin.set_fact:
     vhost_locations_all: >
       {{ vhost_locations_all + [{
       'path': item.path,
@@ -43,5 +43,5 @@
   loop: "{{ vhost_locations + [{'path': ''}] }}"
 
 - name: "Setup {{ vhost_id + ' vhost on ' + web_server }}"
-  include_tasks: "{{ web_server }}.yml"
+  ansible.builtin.include_tasks: "{{ web_server }}.yml"
   when: web_server != 'none'