ianling

---
#first, dump all MySQL databases and move them to a folder that gets backed up by BackupPC
- hosts: mysql
  tasks:
   - name: Create /backup/sql recursively
     file: path=/backup/sql state=directory owner=backup group=backup mode=0766 recurse=yes

   - name: Dump all MySQL databases, where applicable
     shell: "/usr/bin/mysqldump --all-databases > /backup/sql/mysql.sql"

ianling

---
- name: Incrementally back up host using BackupPC
  hosts: all
  remote_user: backup

  tasks:
   - name: Back up the host
     local_action: command /usr/share/backuppc/bin/BackupPC_dump -i {{ inventory_hostname }}

ianling

---
- name: Set up backup user to be used by Ansible
  hosts: all
  remote_user: <an existing user>

  roles:
   - yaegashi.blockinfile

  tasks:
   - name: Generate a unique key for this host

ianling

---
- name: Change the root password and store the updated password locally in /backup/passwords/<hostname>
  hosts: all
  remote_user: backup

  vars:
    plaintextpw: "{{ lookup('password', '/backup/passwords/'+inventory_hostname+' chars=ascii_letters,digits,hexdigits,punctuation,, length=20') }}"

  tasks:
   - name: Remove the old password file, if it exists

ianling

print 2 # ...
i = 3
while True:
    divisorMax = (i/2)
    prime = True
    for divisor in range(3,divisorMax,2):
        if i % divisor == 0:
            prime = False
            break
    if prime:

ianling

---
- name: Set up sshcerts for MYUSER
  hosts: all
  remote_user: MYUSER

  tasks:
   - name: Generate a unique key for this host
     local_action: command /usr/bin/ssh-keygen -b 2048 -t rsa -f /home/MYUSER/sshkeys/{{ inventory_hostname }} -q -N ""

   - name: Create /backup/.ssh recursively

ianling

---
- name: Check if SSL certs will expire soon
  hosts: servers-with-ssl-certs
  remote_user: backup

  tasks:
   - name: Run the SSL cert check script
     script: /usr/local/bin/check_ssl_cert.sh
     register: scriptoutput
   - name: Print script output

ianling

#!/bin/bash
for cert in `find /etc/letsencrypt/live -name 'cert.pem'` ; do
certpath=`/usr/bin/dirname $cert`
website=`basename $certpath`
if /usr/bin/openssl x509 -checkend 2592000 -noout -in $cert ; then
  echo "Cert for $website is good"
else
  echo "**Cert for $website is bad**"
fi
done

ianling

---
- name: Set up sshcerts for ianl
  hosts: all
  remote_user: ianl

  tasks:
   - name: Generate a unique key for each host
     local_action: command /usr/bin/ssh-keygen -b 2048 -t rsa -f /home/ianl/sshkeys/{{ inventory_hostname }} -q -N ""
     become: no

ianling

---
- name: Roll out basic config changes to a new server
  hosts: all
  remote_user: backup
  become: yes

  tasks:
   - name:  Disable root login in sshd_config
     lineinfile: "dest=/etc/ssh/sshd_config
                 regexp='^PermitRootLogin '