初始化新安装CentOS7

# 初始化新安装CentOS7
## hosts
```
[template]
10.10.10.10

[template:vars]
ansible_ssh_port=2222

```

## playbook
```yaml
➜  ansible-playbooks cat init-server.yaml
---
- hosts: template
  remote_user: root
  tasks:
    - name: add repos
      copy:
        directory_mode: true
        src: /root/linux-init/yum.repos.d/
        dest: /etc/yum.repos.d/
        mode: 755
        owner: root
        backup: ture

- name: install vim
      yum:
        name:
        - net-tools
        - vim
        - wget
        - bind-utils
        state: present

- name: modify firewalld
      firewalld:
        permanent: yes
        port: 11022/tcp
        state: enabled
        immediate: true

- name: disable selinux
      copy:
        src: /root/linux-init/selinux-config
        dest: /etc/selinux/config
        mode: 644
        owner: root

- name: add sysctl.conf
      copy:
        src: /root/linux-init/sysctl.conf
        dest: /etc/sysctl.conf
        mode: 644
        owner: root

- name: add login.defs
      copy:
        src: /root/linux-init/login.defs
        dest: /etc/login.defs
        mode: 644
        owner: root

- name: add limits.conf
      copy:
        src: /root/linux-init/security-limits.conf
        dest: /etc/security/limits.conf
        mode: 644
        owner: root

- name: add /etc/pam.d/system-auth
      copy:
        src: /root/linux-init/pam.d-system-auth
        dest: /etc/pam.d/system-auth
        mode: 644
        owner: root
        backup: true

- name: add /etc/ssh/sshd_config
      copy:
        src: /root/linux-init/ssh-sshd_config
        dest: /etc/ssh/sshd_config
        mode: 600
        owner: root

- name: add /etc/audit/rules.d/djbh.rules
      copy:
        src: /root/linux-init/audit-rules.d-djbh.rules
        dest: /etc/audit/rules.d/djbh.rules
        mode: 644
        owner: root
```