merge common-bitlair into common

roles/common/tasks/apt-minimal.yaml

@@ -1,4 +1,5 @@
 ---
+
 - name: Configure auto-upgrades
   ansible.builtin.template:
     src: apt-minimal

roles/common/tasks/common-bitlair.yaml

@@ -0,0 +1,8 @@
+---
+- name: Update authorized_keys
+  ansible.builtin.template:
+    src: authorized_keys.j2
+    dest: /root/.ssh/authorized_keys
+    mode: 0600
+  when: root_access is defined and root_access
+  tags: authorized_keys

roles/common/tasks/debian-backports.yaml

@@ -1,11 +0,0 @@
----
-- name: Install backports source list
-  ansible.builtin.template:
-    src: backports-source.list
-    dest: /etc/apt/sources.list.d/backports.list
-    owner: root
-    group: root
-    mode: 0644
-  notify: apt update
-
-- ansible.builtin.meta: flush_handlers

roles/common/tasks/debian-upgrade.yaml

@@ -1,4 +1,5 @@
 ---
+
 - name: Install source list
   ansible.builtin.template:
     src: stable-sources.list

roles/common/tasks/main.yaml

@@ -6,15 +6,25 @@
   when: ansible_facts['distribution_release'] != "bookworm"
   tags: [ debian-upgrade, never ]
 
-- name: Import debian-backports.yaml
-  ansible.builtin.import_tasks:
-    file: debian-backports.yaml
+- name: Apt config and sources.list
+  ansible.builtin.template:
+    src: "{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: "{{ item.mode | default('0644') }}"
+    owner: "{{ item.owner | default('root') }}"
+    group: "{{ item.group | default('root') }}"
+  with_items:
+    - { src: "apt.conf.j2", dest: "/etc/apt/apt.conf" }
+    - { src: "sources.list.j2", dest: "/etc/apt/sources.list" }
+  when:
+    - ansible_os_family == "Debian"
+  tags:
+    - sourceslist
 
-  tags: debian_backports
-
-- tags: unattended_updates
+- name: Import unattended-updates
   ansible.builtin.import_tasks:
     file: unattended-updates.yaml
+  tags: unattended_updates
 
 - tags: apt-minimal
   ansible.builtin.import_tasks:

roles/common/tasks/node-exporter.yaml

@@ -1,4 +1,5 @@
 ---
+
 - name: Install node-exporter
   ansible.builtin.apt:
     name: prometheus-node-exporter