---
# Playbook de Post install
- name: "Post Install WEB"
  hosts: all
  remote_user: root
  tasks:

    - name: "Création des groupes"
      group: name={{item.name}}
             gid={{item.gid}}
             state=present
      with_items: groups_to_create

    - name: "Création des utilisateurs"
      user: name={{item.name}}
            uid={{item.uid}}
            group={{item.gid}}
      with_items: users_to_create

    - name: "Changement des mots de passe"
      when: item.passwd is defined
      user: name={{item.name}}
            password={{item.passwd}}
      with_items: users_to_create

    - name: "Application du groupe secondaire"
      when: item.gid_2 is defined
      user: name={{item.name}}
            groups={{item.gid_2}}
      with_items: users_to_create

    - name: "MAJ profile"
      template: src=profile.j2 dest=/home/{{item.name}}/.bash_profile
      with_items: users_to_create

    - name: "Application des droits"
      file: path={{item.path}}
            owner={{item.owner}}
            group={{item.group}}
            mode={{item.mode}}
      with_items: files_to_chown

    - name: "Set Swappinness"
      sysctl: name=vm.swappiness value=10 state=present

    - name: "Suppression des utilisateurs"
      user: name={{item.name}} state=absent
      with_items: users_to_del

    - name: "Configuration SSH"
      template: src=sshd_config.j2 dest=/etc/ssh/sshd_config
      notify:
      - restart sshd

    - name: "Configuration des repos yum CentOS 7"
      yumrepo:
        name: epel
        description: EPEL YUM repo
        baseurl: http://download.fedoraproject.org/pub/epel/$releasever/$basearch/
        enabled: yes
        file: epel
      yumrepo:
        name: epel-debuginfo
        description: EPEL YUM repo - Debug
        baseurl: baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch/debug
        enabled: no
        file: epel
      yumrepo:
        name: epel-source
        description: EPEL YUM repo - Source
        baseurl: baseurl=baseurl=http://download.fedoraproject.org/pub/epel/7/SRPMS
        enabled: no
        file: epel

      yumrepo:
        name: CentOS-Base
        description: BASE repo
        baseurl: http://mirror.centos.org/centos/$releasever/os/$basearch/
        enabled: yes
        file: CentOS-Base
      yumrepo:
        name: CentOS-Updates
        description: CentOS UPDATES repo
        baseurl: http://mirror.centos.org/centos/$releasever/updates/$basearch/
        enabled: yes
        file: CentOS-Base
      yumrepo:
        name: CentOS-Extra
        description: CentOS EXTRA repo
        baseurl: http://mirror.centos.org/centos/$releasever/extras/$basearch/
        enabled: yes
        file: CentOS-Base
      yumrepo:
        name: CentOS-Plus
        description: CentOS PLUS repo
        baseurl: baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/
        enabled: yes
        file: CentOS-Base

    - name: "Install Packages"
      yum: name={{item}} state=installed
      with_items: packages
      notify: restart sendmail

    - name: "Configuration des SUDOers"
      template: src=sudoers.j2 dest=/etc/sudoers