moved tasks to other role

roles/generic/files/chrony.j2

@@ -1,66 +0,0 @@
-# Welcome to the chrony configuration file. See chrony.conf(5) for more
-# information about usable directives.
-
-# Include configuration files found in /etc/chrony/conf.d.
-confdir /etc/chrony/conf.d
-
-# This will use (up to):
-# - 4 sources from ntp.ubuntu.com which some are ipv6 enabled
-# - 2 sources from 2.ubuntu.pool.ntp.org which is ipv6 enabled as well
-# - 1 source from [01].ubuntu.pool.ntp.org each (ipv4 only atm)
-# This means by default, up to 6 dual-stack and up to 2 additional IPv4-only
-# sources will be used.
-# At the same time it retains some protection against one of the entries being
-# down (compare to just using one of the lines). See (LP: #1754358) for the
-# discussion.
-#
-# About using servers from the NTP Pool Project in general see (LP: #104525).
-# Approved by Ubuntu Technical Board on 2011-02-08.
-# See http://www.pool.ntp.org/join.html for more information.
-#pool ntp.ubuntu.com        iburst maxsources 4
-#pool 0.ubuntu.pool.ntp.org iburst maxsources 1
-#pool 1.ubuntu.pool.ntp.org iburst maxsources 1
-#pool 2.ubuntu.pool.ntp.org iburst maxsources 2
-
-pool {{ sk_ntp1 }}
-pool {{ sk_ntp2 }}
-pool {{ sk_ntp3 }}
-
-# Use time sources from DHCP.
-sourcedir /run/chrony-dhcp
-
-# Use NTP sources found in /etc/chrony/sources.d.
-sourcedir /etc/chrony/sources.d
-
-# This directive specify the location of the file containing ID/key pairs for
-# NTP authentication.
-keyfile /etc/chrony/chrony.keys
-
-# This directive specify the file into which chronyd will store the rate
-# information.
-driftfile /var/lib/chrony/chrony.drift
-
-# Save NTS keys and cookies.
-ntsdumpdir /var/lib/chrony
-
-# Uncomment the following line to turn logging on.
-#log tracking measurements statistics
-
-# Log files location.
-logdir /var/log/chrony
-
-# Stop bad estimates upsetting machine clock.
-maxupdateskew 100.0
-
-# This directive enables kernel synchronisation (every 11 minutes) of the
-# real-time clock. Note that it can't be used along with the 'rtcfile' directive.
-rtcsync
-
-# Step the system clock instead of slewing it if the adjustment is larger than
-# one second, but only in the first three clock updates.
-makestep 1 3
-
-# Get TAI-UTC offset and leap seconds from the system tz database.
-# This directive must be commented out when using time sources serving
-# leap-smeared time.
-leapsectz right/UTC

roles/generic/files/sshd_config.j2

@@ -1 +0,0 @@
-Port {{ sk_ssh_port }}

roles/generic/tasks/main.yml

@@ -1,15 +1,79 @@
 ---
-name: Update & Ubuntu & Debian
+- name: Update & Ubuntu & Debian
   apt:
     name: "*"
     state: latest
     update_cache: true
   when: ansible_os_family == "Debian"
 
-name: Install basic software
+- name: Install basic software
   apt:
     name: "{{ sk_ubuntu_software }}"
     state: latest
-    update_cache: true
+   update_cache: true
   when: ansible_os_family == "Debian"
 
+- name: Set timezone to Warsaw
+  timezone:
+    name: Europe/Warsaw
+
+- name: Hostname Configuration
+  hostname:
+    name: "{{ sk_host }}.{{ sk_domain }}"
+    use: systemd    
+
+# UFW configuration
+- name: Disable UFW
+  community.general.ufw:
+    state: disabled
+  when: ansible_os_family == "Debian"
+
+- name: Reset UFW to default
+  community.general.ufw:
+    state: reset
+  when: ansible_os_family == "Debian"
+
+- name: Set default policy for incoming traffic to 'deny'
+  community.general.ufw:
+    direction: incoming
+    policy: deny
+  when: ansible_os_family == "Debian"
+
+- name: Set default policy for outgoing traffic to 'allow'
+  community.general.ufw:
+    direction: outgoing
+    policy: allow
+  when: ansible_os_family == "Debian"
+  
+- name: Allow access from {{ sk_wan_network }} to any port "{{sk_ssh_port}}"
+  community.general.ufw:
+    rule: allow
+    src: {{ sk_wan_network }}
+    to_port: "{{sk_ssh_port}}"
+    comment: 'SSH'
+  when: ansible_os_family == "Debian"
+
+- name: Limit log from "{{ sk_lan_network }}" to tcp port "{{sk_ssh_port}}"
+  community.general.ufw:
+    rule: limit
+    log: yes
+    src: "{{ sk_lan_network }}"
+    to_port: "{{sk_ssh_port}}"
+    proto: tcp
+  when: ansible_os_family == "Debian"
+
+- name: Reload UFW
+  community.general.ufw:
+    state: reloaded
+  when: ansible_os_family == "Debian"  
+
+- name: Enable UFW
+  community.general.ufw:
+    state: enabled
+  when: ansible_os_family == "Debian"      
+
+- name: Enable chronyd
+  service:
+    name: chronyd
+    state: started
+    enabled: true