mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-04-29 11:48:52 +00:00
47 lines
1.2 KiB
YAML
47 lines
1.2 KiB
YAML
- name: Waiting for SSH connection
|
|
wait_for_connection:
|
|
|
|
- name: Gathering facts
|
|
setup:
|
|
|
|
- name: Cloning T-Pot install directory
|
|
git:
|
|
repo: "https://github.com/dtag-dev-sec/tpotce.git"
|
|
dest: /root/tpot
|
|
|
|
- name: Prepare to set user password
|
|
set_fact:
|
|
user_name: "{{ ansible_user }}"
|
|
user_salt: "s0mew1ck3dTpoT"
|
|
|
|
- name: Changing password for user {{ user_name }}
|
|
user:
|
|
name: "{{ ansible_user }}"
|
|
password: "{{ user_password | password_hash('sha512', user_salt) }}"
|
|
state: present
|
|
shell: /bin/bash
|
|
|
|
- name: Copy T-Pot configuration file
|
|
template:
|
|
src: ../../../../../../iso/installer/tpot.conf.dist
|
|
dest: /root/tpot.conf
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: Install T-Pot on instance - be patient, this might take 15 to 30 minutes depending on the connection speed.
|
|
command: /root/tpot/iso/installer/install.sh --type=auto --conf=/root/tpot.conf
|
|
|
|
- name: Delete T-Pot configuration file
|
|
file:
|
|
path: /root/tpot.conf
|
|
state: absent
|
|
|
|
- name: Change unattended-upgrades to take default action
|
|
blockinfile:
|
|
dest: /etc/apt/apt.conf.d/50unattended-upgrades
|
|
block: |
|
|
Dpkg::Options {
|
|
"--force-confdef";
|
|
"--force-confold";
|
|
}
|