May 27 13:14:16 dc00-gitlab postfix/qmgr[73284]: 47BA3C6467: removed
May 27 13:16:10 dc00-gitlab postfix/pickup[2179515]: 5001CC6438: uid=0 from=<root@dc00-gitlab>
May 27 13:16:10 dc00-gitlab postfix/cleanup[2186183]: 5001CC6438: message-id=<20220527091610.5001CC6438@dc00-gitlab.dc00.gddc.domain.ru>
May 27 13:16:10 dc00-gitlab postfix/qmgr[73284]: 5001CC6438: from=<root@dc00-gitlab>, size=406, nrcpt=1 (queue active)
May 27 13:16:10 dc00-gitlab postfix/error[2186185]: 5001CC6438: to=<user@domain.ru>, relay=none, delay=0.03, delays=0.02/0/0/0.01, dsn=5.0.0, status=bounced (domain.ru)
May 27 13:16:10 dc00-gitlab postfix/cleanup[2186183]: 54CCFC649C: message-id=<20220527091610.54CCFC649C@dc00-gitlab.dc00.gddc.domain.ru>
May 27 13:16:10 dc00-gitlab postfix/qmgr[73284]: 54CCFC649C: from=<>, size=2389, nrcpt=1 (queue active)
May 27 13:16:10 dc00-gitlab postfix/bounce[2186186]: 5001CC6438: sender non-delivery notification: 54CCFC649C
May 27 13:16:10 dc00-gitlab postfix/qmgr[73284]: 5001CC6438: removed
May 27 13:16:10 dc00-gitlab postfix/local[2186187]: 54CCFC649C: to=<root@dc00-gitlab>, relay=local, delay=0.01, delays=0/0.01/0/0, dsn=2.0.0, status=sent (delivered to mailbox)
May 27 13:16:10 dc00-gitlab postfix/qmgr[73284]: 54CCFC649C: removed

depends_on:

  - one

[global]

## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will part of
   security = ADS
   workgroup = DOMAIN0
   realm = DOMAIN.COM
   machine password timeout = 0
   idmap config *:backend = tdb
   idmap config *:range = 1000000-1999999
   idmap config DOMAIN.COM:backend = rid
   idmap config DOMAIN.COM:range = 10000-999999
# server string is the equivalent of the NT Description field
	server string = %h server (Samba, Ubuntu)

   log file = /var/log/samba/log.%m

   max log size = 1000

   panic action = /usr/share/samba/panic-action %d

   server role = standalone server

   passdb backend = tdbsam

   obey pam restrictions = yes

   unix password sync = yes


   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

   pam password change = yes

   map to guest = bad user

   usershare allow guests = yes


[homes]
   comment = Home Directory of User %U in Domain %D
   path = /home/local/%D/%U
   browseable = no
   create mask = 640
   directory mask = 0750
   valid users = %U

[printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   printable = yes
   guest ok = no
   read only = yes
   create mask = 0700


[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no


[testshare]
comment = This is a test share
path = /share
valid users = DOMAIN0\Пользователи^домена
write list = DOMAIN0\\Пользователи^домена

Chain INPUT (policy DROP)
target prot opt source               destination
ACCEPT all  --  anywhere  anywhere
ACCEPT all  --  anywhere  anywhere   state RELATED,ESTABLISHED
ACCEPT tcp  --  192.168.0.0/24         anywhere tcp dpt:ssh
ACCEPT tcp  --  anywhere  anywhere tcp dpt:http
ACCEPT udp  --  anywhere  anywhere udp dpt:sip
ACCEPT udp  --  anywhere  anywhere udp dpt:13131
ACCEPT udp  --  anywhere  anywhere udp dpt:sips
ACCEPT udp  --  anywhere  anywhere udp dpts:ndmp:dnp
ACCEPT udp  --  anywhere  anywhere udp dpt:iax
ACCEPT tcp  --  anywhere  anywhere tcp dpt:5038
ACCEPT tcp  --  anywhere  anywhere tcp dpt:sip
ACCEPT tcp  --  anywhere  anywhere tcp dpt:13131
ACCEPT tcp  --  anywhere  anywhere tcp dpt:sips
ACCEPT udp  --  anywhere  anywhere udp dpt:sip
ACCEPT udp  --  anywhere  anywhere udp dpt:13131
ACCEPT udp  --  anywhere  anywhere udp dpts:ndmp:dnp
ACCEPT udp  --  anywhere  anywhere udp dpt:iax
ACCEPT tcp  --  anywhere  anywhere tcp dpt:5038
ACCEPT icmp --  anywhere  anywhere

#!/bin/bash
### BEGIN INIT INFO
# Provides: test
# Required-Start: $all
# Required-Stop:
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: adds iptables rules
### END INIT INFO

IPTABLES=/sbin/iptables
LAN_NET=128.1.0.0/16

#delete tables
$IPTABLES -F

$IPTABLES -t nat -F

$IPTABLES -A INPUT -i lo -j ACCEPT
$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A INPUT -s 128.1.0.0/16 -p tcp --dport 22 -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 80 -j ACCEPT
$IPTABLES -P INPUT DROP
$IPTABLES -P FORWARD DROP
$IPTABLES -P OUTPUT ACCEPT

[Unit]
Description=test
Requires=network.target
After=network.target

[Service]
Type=oneshot
ExecStart=/home/scripts/test

[Install]
WantedBy=multi-user.target

~/script

bash: start: команда не найдена...
Ошибка при поиске файла: cannot update repo 'Stream-AppStream': Cannot prepare internal mirrolist: No URLs in mirrorlist

TYPE=Ethernet
PROXY_METHOD=none
BOTPROTO=none
DNS1=192.168.2.1
GATEWAY0=192.168.2.1
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=no
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=enp0s8
DEVICE=enp0s8
ONBOOT=yes
IPADDR=192.168.2.2
PREFIX=24
GATEWAY=192.168.2.1
IPV6ADDR=1234:1111:222:3333:4444:5555:2:2/128

connect: Network is unreachable

ui vesamenu.c32
PROMPT 0
menu background background.jpg
menu title Boot menu

LABEL bootlocal
   menu label Standard boot
   kernel chain.c32
   append hd0 0
   timeout 10
 TEXT HELP
The system will boot after the time is up
 ENDTEXT

LABEL Windows PE ->
      KERNEL memdisk
      APPEND iso raw initrd=images/ubuntu-18.04.3.iso
LABEL Windows PE ->
      KERNEL memdisk
      APPEND iso raw initrd=images\ubuntu-18.04.3.iso
LABEL Windows PE ->
      KERNEL memdisk
      APPEND iso raw initrd=/tftpboot/pxelinux.cfg/iso/ubuntu-18.04.3.iso
LABEL Windows PE ->
      KERNEL memdisk
      APPEND iso raw initrd=\tftpboot\pxelinux.cfg\iso\ubuntu-18.04.3.iso
LABEL Windows PE ->
      KERNEL memdisk
      APPEND iso raw initrd=192.168.2.1:\iso\ubuntu-18.04.3.iso
LABEL Windows PE ->
      KERNEL memdisk
      APPEND iso raw initrd=192.168.2.1:/iso/ubuntu-18.04.3.iso

Loading memdisl..
Could not find ramdisk image: 192.168.2.1:/iso/ubuntu-18.04.3.iso

- name: test
  hosts: all
  become: yes

  vars:
    countryName: US
    stateOrProvinceName: CA
    localityName: SanFrancisco
    organizationName: Fort_Funston
    commonName: "CLIENT"
    name: EasyRSA
    emailAddress: me@myhost.mydomain
    answer: y

  tasks:

  - name: test
  shell: 'build-key {{inventory_hostname}}'

Ansible –I hosts.txt all –m ping

---
- name: ping
  hosts: all
  become: yes
  tasks:
- name: ping
  ping:

[comp]
Xenial2 ansible_host=192.168.2.108 ansible_user=user ansible_ssh_private_key_file=/home/user/.ssh/id_rsa.pub