48 lines
1.3 KiB
YAML
48 lines
1.3 KiB
YAML
---
|
|
|
|
|
|
- name: Install base packages
|
|
win_chocolatey:
|
|
name:
|
|
- "{{ windows_base_packages_item }}"
|
|
state: present
|
|
loop: "{{ windows_base_packages }}"
|
|
loop_control:
|
|
loop_var: windows_base_packages_item
|
|
|
|
- name: Install Server Services
|
|
ansible.windows.win_feature:
|
|
name:
|
|
- "{{ windows_features_item }}"
|
|
state: present
|
|
loop: "{{ windows_features }}"
|
|
loop_control:
|
|
loop_var: windows_features_item
|
|
|
|
- name: Disable ms_tcpip6 of all the Interface
|
|
community.windows.win_net_adapter_feature:
|
|
interface: '*'
|
|
state: disabled
|
|
component_id:
|
|
- ms_tcpip6
|
|
|
|
- name: disable IE Enhanced Security
|
|
block:
|
|
|
|
- name: disable for user
|
|
win_shell: 'Set-ItemProperty -Path "HKLM:\\SOFTWARE\\Microsoft\\Active Setup\\Installed Components\\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" -Name "IsInstalled" -Value 0'
|
|
|
|
- name: disable for admin
|
|
win_shell: 'Set-ItemProperty -Path "HKLM:\\SOFTWARE\\Microsoft\\Active Setup\\Installed Components\\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}" -Name "IsInstalled" -Value 0'
|
|
|
|
- name: disable automatic updates
|
|
ansible.windows.win_regedit:
|
|
path: HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
|
|
name: NoAutoUpdate
|
|
data: 1
|
|
|
|
- name: disable Firewall
|
|
win_shell: "netsh advfirewall set allprofiles state off"
|
|
|
|
|
|
... |