Add debian common role

common-debian/templates/var/backups/ssh/authorized_keys.j2

@@ -0,0 +1,6 @@
+# backup user authorized_keys
+# {{ ansible_managed }}
+
+{% for entry in backup_ssh_keys %}
+{{ entry.type }} {{ entry.key }} {{ entry.name }} {{ entry.date }}
+{% endfor %}

common-debian/templates/var/backups/timestamp.sh.j2

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+# Writes timestamps on successful BackupPC completion and updates dynamic share inventory for this host
+# {{ ansible_managed }}
+
+OK="$1"
+SHARE="$2"
+grep -F "${SHARE}" /var/backups/shares || echo "${SHARE}" >> /var/backups/shares
+if [[ ${OK} -eq 1 ]]; then
+	/bin/date +%s > ${SHARE}/.backup
+fi

common-debian/templates/var/home/deploy/ssh/authorized_keys.j2

@@ -0,0 +1,8 @@
+# deploy user authorized_keys
+# {{ ansible_managed }}
+
+{% for user in admin_users %}
+{% for entry in user.ssh_keys %}
+{{ entry.type }} {{ entry.key }} {{ entry.name }} {{ entry.date }}
+{% endfor %}
+{% endfor %}

common-debian/templates/var/home/user/bash_logout.j2

@@ -0,0 +1,7 @@
+# BLSE 2.x bash_logout file
+# {{ ansible_managed }}
+
+# when leaving the console clear the screen to increase privacy
+if [ "$SHLVL" = 1 ]; then
+    [ -x /usr/bin/clear_console ] && /usr/bin/clear_console -q
+fi

common-debian/templates/var/home/user/bashrc.j2

@@ -0,0 +1,149 @@
+#!/bin/bash
+
+# BLSE 2.x bashrc file
+# {{ ansible_managed }}
+
+#
+# GENERAL SETTINGS
+#
+
+# Before anything, see if we're running interactively. If not, skip everything here.
+[[ $- == *i* ]] || return
+
+# Ensure bash completion is enabled if installed
+if ! shopt -oq posix; then
+  if [ -f /usr/share/bash-completion/bash_completion ]; then
+    . /usr/share/bash-completion/bash_completion
+  elif [ -f /etc/bash_completion ]; then
+    . /etc/bash_completion
+  fi
+fi
+
+# Some other tweaks
+[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"
+if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then
+    debian_chroot=$(cat /etc/debian_chroot)
+fi
+
+# Set history limits and values
+shopt -s cdspell
+shopt -s dirspell
+shopt -s dotglob
+shopt -s histreedit
+shopt -s histverify
+shopt -s histappend
+PROMPT_COMMAND="history -a;$PROMPT_COMMAND"
+HISTCONTROL=ignoreboth
+HISTSIZE=25000
+HISTFILESIZE=25000
+
+#
+# BASH SETTINGS
+#
+
+# Set a shiny Linux Mint-style PS1 with spaces for easy double-click-select
+git_branch() {
+	git branch 2> /dev/null | sed -e '/^[^*]/d' -e 's/* \(.*\)/git:\1 /'
+}
+export PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\[\033[01;32m\]\H\[\033[01;34m\] \[\e[35m\]$(git_branch)\[\033[01;34m\]\w \$\[\033[00m\] '
+
+# Sensible PATH (find things in *sbin* as non-root user)
+export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/games:/usr/games:/usr/lib/check_mk_agent/plugins"
+
+# Set PATH to include ~/Scripts if it exists
+if [ -d ~/Scripts ]; then
+	export PATH=~/Scripts:$PATH
+fi
+
+# Set editor to vim
+export EDITOR=/usr/bin/vim
+
+# Force SCREEN to xterm due to Debian weirdness
+export SCREEN="xterm"
+
+
+#
+# ALIASES
+#
+
+# Coloured command aliases
+alias ls='ls --color=always'
+alias dir='dir --color=always'
+alias vdir='vdir --color=always'
+alias grep='grep --color=always'
+alias fgrep='fgrep --color=always'
+alias egrep='egrep --color=always'
+alias xzgrep='xzgrep --color=always'
+alias less='less -r'
+
+# Convenient ls aliases
+alias ll='ls -alh'
+alias la='ls -A'
+alias l='ls -lh'
+
+# Always-sudo commands, because fuck typing sudo all the time
+alias service='sudo service'
+alias systemctl='sudo systemctl'
+alias journalctl='sudo journalctl'
+alias dmesg='sudo dmesg'
+alias apt='sudo apt'
+alias dpkg='sudo dpkg'
+alias find='sudo find'
+alias htop='sudo htop'
+alias powertop='sudo powertop'
+alias jnettop='sudo jnettop'
+alias wavemon='sudo wavemon'
+alias parted='sudo parted'
+alias fdisk='sudo fdisk'
+alias gdisk='sudo gdisk'
+alias chroot='sudo chroot'
+alias mount='sudo mount'
+alias umount='sudo umount'
+alias virsh='sudo virsh -c qemu:///system'
+alias ceph='sudo ceph'
+alias rbd='sudo rbd'
+alias mysql='sudo mysql'
+alias zpool='sudo zpool'
+alias zfs='sudo zfs'
+alias crm='sudo crm'
+
+# Cool aliases
+alias cccp='sudo rsync -auv --progress'
+alias untmp='sudo umount /tmp/tmp.*{/*/*,/*,} 2>/dev/null'
+alias txz='tar -p --same-owner -I "xz -T4"'
+alias stxz='sudo tar -p --same-owner -I "xz -T4"'
+alias hatop='sudo hatop -s /var/lib/haproxy/admin.sock'
+alias zkcli='sudo /usr/share/zookeeper/bin/zkCli.sh -server $(hostname -s):2181'
+alias patronictl='sudo patronictl -c /etc/patroni/config.yml -d zookeeper://$(hostname -s):2181'
+alias repo='sudo reprepro -b /srv/debrepo'
+alias beet='sudo -u debian-deluged beet --config=/srv/deluged/config.beets/config.yaml'
+alias glances='sudo glances -t 5'
+{% if 'role_mon' in group_names %}
+alias icli='sudo -u monitor icli --status-file /omd/sites/monitor/tmp/nagios/status.dat --config /omd/sites/monitor/var/nagios/objects.cache -z \!o'
+
+#
+# Show monitoring stats
+#
+
+icli
+{% endif %}
+
+#
+# SOURCE OTHER SCRIPTS
+#
+
+if [[ -d ~/.bashrc.d ]]; then
+    for script in ~/.bashrc.d/*; do
+        . "$script"
+    done
+fi
+
+#
+# NICE AND CLEAN
+#
+
+echo
+
+#
+# END OF FILE
+#

common-debian/templates/var/home/user/config/htop/htoprc.j2

@@ -0,0 +1,25 @@
+# htop config file
+# {{ ansible_managed }}
+fields=0 48 17 18 38 39 40 2 46 47 49 1 
+sort_key=46
+sort_direction=0
+hide_threads=0
+hide_kernel_threads=0
+hide_userland_threads=0
+shadow_other_users=0
+show_thread_names=1
+highlight_base_name=1
+highlight_megabytes=1
+highlight_threads=1
+tree_view=0
+header_margin=1
+detailed_cpu_time=1
+cpu_count_from_zero=0
+update_process_names=1
+account_guest_in_cpu_meter=1
+color_scheme=0
+delay=15
+left_meters=LeftCPUs2 Blank CPU Blank Blank Memory Swap 
+left_meter_modes=1 2 1 2 2 1 1 
+right_meters=RightCPUs2 Blank LoadAverage Tasks Blank Hostname Clock Uptime Blank 
+right_meter_modes=1 2 2 2 2 2 2 2 2 

common-debian/templates/var/home/user/profile.j2

@@ -0,0 +1,16 @@
+# {{ ansible_managed }}
+
+EDITOR=/usr/bin/vim
+
+# if running bash
+if [ -n "$BASH_VERSION" ]; then
+    # include .bashrc if it exists
+    if [ -f "$HOME/.bashrc" ]; then
+	. "$HOME/.bashrc"
+    fi
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/bin" ] ; then
+    PATH="$HOME/bin:$PATH"
+fi

common-debian/templates/var/home/user/ssh/authorized_keys.j2

@@ -0,0 +1,6 @@
+# administrative shell user authorized_keys ({{ item.name }})
+# {{ ansible_managed }}
+
+{% for entry in item.ssh_keys %}
+{{ entry.type }} {{ entry.key }} {{ entry.name }} {{ entry.date }}
+{% endfor %}

common-debian/templates/var/home/user/vimrc.j2

@@ -0,0 +1,13 @@
+set showcmd
+set number
+set cursorline
+set autoindent
+set expandtab
+set tabstop=4
+set viminfo='100,<1000,s1000,h
+hi CursorLine term=bold cterm=bold guibg=Grey40
+syntax on
+set ruler
+set directory=~/.vim
+set mouse=
+autocmd Filetype gitcommit setlocal spell textwidth=72