style: linting
This commit is contained in:
VC
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: reload firewall
|
||||
openwrt_init:
|
||||
name: firewall
|
||||
state: reloaded
|
||||
name: firewall
|
||||
state: reloaded
|
||||
|
||||
@@ -1,5 +1,7 @@
|
||||
---
|
||||
|
||||
- name: generate firewall file
|
||||
template:
|
||||
src: firewall.j2
|
||||
dest: /etc/config/firewall
|
||||
src: firewall.j2
|
||||
dest: /etc/config/firewall
|
||||
notify: reload firewall
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: restart vsftpd
|
||||
service:
|
||||
name: vsftpd
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: Install vsftpd
|
||||
package:
|
||||
name: vsftpd
|
||||
@@ -5,15 +7,15 @@
|
||||
|
||||
- name: Create ftp directory
|
||||
file:
|
||||
path: /srv/ftp
|
||||
state: directory
|
||||
path: /srv/ftp
|
||||
state: directory
|
||||
|
||||
- name: Create upload directory
|
||||
file:
|
||||
path: /srv/ftp/upload
|
||||
owner: ftp
|
||||
group: root
|
||||
state: directory
|
||||
path: /srv/ftp/upload
|
||||
owner: ftp
|
||||
group: root
|
||||
state: directory
|
||||
|
||||
- name: Config vsftpd
|
||||
copy:
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: restart haproxy
|
||||
service:
|
||||
name: haproxy
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: install haproxy package
|
||||
package:
|
||||
name: haproxy
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
source_pass: !vault |
|
||||
$ANSIBLE_VAULT;1.1;AES256
|
||||
36383738646636353839616365316537653865666335353136666166336137636635663062626265
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart icecast2
|
||||
service:
|
||||
name: icecast2
|
||||
state: restarted
|
||||
name: icecast2
|
||||
state: restarted
|
||||
|
||||
@@ -1,12 +1,13 @@
|
||||
---
|
||||
|
||||
- name: install icecast2
|
||||
package:
|
||||
name: icecast2
|
||||
state: present
|
||||
name: icecast2
|
||||
state: present
|
||||
|
||||
- name: configuration file
|
||||
template:
|
||||
src: icecast.xml.j2
|
||||
dest: /etc/icecast2/icecast.xml
|
||||
src: icecast.xml.j2
|
||||
dest: /etc/icecast2/icecast.xml
|
||||
notify:
|
||||
- restart icecast2
|
||||
|
||||
- restart icecast2
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart mailman3
|
||||
service:
|
||||
name: mailman3
|
||||
state: restarted
|
||||
name: mailman3
|
||||
state: restarted
|
||||
|
||||
@@ -1,7 +1,9 @@
|
||||
---
|
||||
|
||||
- name: install mailman3 and dependencies
|
||||
package:
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
loop:
|
||||
- mailman3-full
|
||||
- sqlite3
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
mariadb_backup_hour: 5
|
||||
mariadb_backup_minute: 0
|
||||
mariadb_query_cache_memory: 64
|
||||
|
||||
@@ -1,7 +1,9 @@
|
||||
---
|
||||
|
||||
- name: restart mariadb
|
||||
service:
|
||||
name: mariadb
|
||||
state: restarted
|
||||
name: mariadb
|
||||
state: restarted
|
||||
|
||||
- name: daemon-reload
|
||||
command: systemctl daemon-reload
|
||||
|
||||
@@ -1,34 +1,36 @@
|
||||
---
|
||||
|
||||
- name: install mariadb
|
||||
package:
|
||||
name: mariadb-server
|
||||
state: present
|
||||
name: mariadb-server
|
||||
state: present
|
||||
|
||||
- name: create mysql directory
|
||||
file:
|
||||
path: /srv/mysql
|
||||
owner: mysql
|
||||
group: mysql
|
||||
state: directory
|
||||
path: /srv/mysql
|
||||
owner: mysql
|
||||
group: mysql
|
||||
state: directory
|
||||
|
||||
- name: populate mysql directory
|
||||
command: /usr/bin/mysql_install_db --datadir=/srv/mysql
|
||||
args:
|
||||
creates: /srv/mysql/ibdata1
|
||||
creates: /srv/mysql/ibdata1
|
||||
notify: restart mariadb
|
||||
|
||||
- name: replace conffile
|
||||
template:
|
||||
src: 50-server.cnf.j2
|
||||
dest: /etc/mysql/mariadb.conf.d/50-server.cnf
|
||||
src: 50-server.cnf.j2
|
||||
dest: /etc/mysql/mariadb.conf.d/50-server.cnf
|
||||
notify: restart mariadb
|
||||
|
||||
- name: debian upgrade file conf
|
||||
template:
|
||||
src: debian.cnf.j2
|
||||
dest: /etc/mysql/debian.cnf
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0600'
|
||||
src: debian.cnf.j2
|
||||
dest: /etc/mysql/debian.cnf
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0600'
|
||||
notify: restart mariadb
|
||||
|
||||
- name: force handlers
|
||||
@@ -36,8 +38,8 @@
|
||||
|
||||
- name: install python-mysql
|
||||
package:
|
||||
name: python3-pymysql
|
||||
state: present
|
||||
name: python3-pymysql
|
||||
state: present
|
||||
|
||||
- name: check if .my.cnf file exists
|
||||
stat:
|
||||
@@ -98,15 +100,14 @@
|
||||
|
||||
- name: install backup script
|
||||
copy:
|
||||
src: files/backup_mysql.sh
|
||||
dest: /usr/local/bin/backup_mysql.sh
|
||||
mode: '0755'
|
||||
src: files/backup_mysql.sh
|
||||
dest: /usr/local/bin/backup_mysql.sh
|
||||
mode: '0755'
|
||||
|
||||
- name: cron backup script
|
||||
cron:
|
||||
name: "MariaDB backup"
|
||||
hour: "{{ mariadb_backup_hour }}"
|
||||
minute: "{{ mariadb_backup_minute }}"
|
||||
job: "/usr/local/bin/backup_mysql.sh"
|
||||
state: present
|
||||
|
||||
name: "MariaDB backup"
|
||||
hour: "{{ mariadb_backup_hour }}"
|
||||
minute: "{{ mariadb_backup_minute }}"
|
||||
job: "/usr/local/bin/backup_mysql.sh"
|
||||
state: present
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: restart mumble
|
||||
service:
|
||||
name: mumble-server
|
||||
|
||||
@@ -1,11 +1,13 @@
|
||||
---
|
||||
|
||||
- name: install mumble
|
||||
package:
|
||||
name: mumble-server
|
||||
state: present
|
||||
name: mumble-server
|
||||
state: present
|
||||
|
||||
- name: configuration files
|
||||
copy:
|
||||
src: ./files/mumble-server.ini
|
||||
dest: /etc/mumble-server.ini
|
||||
src: ./files/mumble-server.ini
|
||||
dest: /etc/mumble-server.ini
|
||||
notify:
|
||||
- restart mumble
|
||||
- restart mumble
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart munin-node
|
||||
service:
|
||||
name: munin-node
|
||||
state: restarted
|
||||
name: munin-node
|
||||
state: restarted
|
||||
|
||||
@@ -1,13 +1,15 @@
|
||||
---
|
||||
|
||||
- name: delete squid plugins
|
||||
shell:
|
||||
cmd: "rm -f /etc/munin/plugins/squid_*"
|
||||
warn: False
|
||||
cmd: "rm -f /etc/munin/plugins/squid_*"
|
||||
warn: false
|
||||
notify:
|
||||
- restart munin-node
|
||||
- restart munin-node
|
||||
|
||||
- name: delete lxc interfaces plugins
|
||||
shell:
|
||||
cmd: "rm -f /etc/munin/plugins/if_*veth* /etc/munin/plugins/if_*fw* /etc/munin/plugins/if_*vmbr*"
|
||||
warn: False
|
||||
cmd: "rm -f /etc/munin/plugins/if_*veth* /etc/munin/plugins/if_*fw* /etc/munin/plugins/if_*vmbr*"
|
||||
warn: false
|
||||
notify:
|
||||
- restart munin-node
|
||||
- restart munin-node
|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
# For Munin servers
|
||||
---
|
||||
|
||||
- name: deploy mikrotik unitary scripts
|
||||
copy:
|
||||
src: "./files/{{ item.0 }}"
|
||||
|
||||
@@ -1,16 +1,16 @@
|
||||
---
|
||||
# for physical servers
|
||||
- name: install necessary packages for hypervisors
|
||||
package:
|
||||
name: lm-sensors
|
||||
state: present
|
||||
name: lm-sensors
|
||||
state: present
|
||||
|
||||
- name: configure specific munin plugin
|
||||
file:
|
||||
path: "/etc/munin/plugins/sensors_{{ item }}"
|
||||
src: /usr/share/munin/plugins/sensors_
|
||||
state: link
|
||||
path: "/etc/munin/plugins/sensors_{{ item }}"
|
||||
src: /usr/share/munin/plugins/sensors_
|
||||
state: link
|
||||
notify:
|
||||
- restart munin-node
|
||||
- restart munin-node
|
||||
loop:
|
||||
- temp
|
||||
|
||||
- temp
|
||||
|
||||
@@ -1,10 +1,11 @@
|
||||
---
|
||||
|
||||
- name: install munin packages
|
||||
package:
|
||||
name: munin
|
||||
state: present
|
||||
name: munin
|
||||
state: present
|
||||
|
||||
- name: munin conf file
|
||||
template:
|
||||
src: munin.conf.j2
|
||||
dest: /etc/munin/munin.conf
|
||||
|
||||
src: munin.conf.j2
|
||||
dest: /etc/munin/munin.conf
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: restart nginx
|
||||
service:
|
||||
name: nginx
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: install nginx package
|
||||
package:
|
||||
name: nginx-full
|
||||
@@ -15,26 +17,26 @@
|
||||
notify:
|
||||
- restart nginx
|
||||
loop:
|
||||
- { src: nginx.conf.j2, dest: /etc/nginx/nginx.conf }
|
||||
- { src: nginx.ssl.conf.j2, dest: /etc/nginx/nginx.ssl.conf }
|
||||
- { src: fastcgi_params.j2, dest: /etc/nginx/fastcgi_params }
|
||||
- { src: proxy_params.j2, dest: /etc/nginx/proxy_params }
|
||||
- { src: default.j2, dest: /etc/nginx/sites-available/default }
|
||||
- {src: nginx.conf.j2, dest: /etc/nginx/nginx.conf}
|
||||
- {src: nginx.ssl.conf.j2, dest: /etc/nginx/nginx.ssl.conf}
|
||||
- {src: fastcgi_params.j2, dest: /etc/nginx/fastcgi_params}
|
||||
- {src: proxy_params.j2, dest: /etc/nginx/proxy_params}
|
||||
- {src: default.j2, dest: /etc/nginx/sites-available/default}
|
||||
|
||||
- name: create base dir
|
||||
file:
|
||||
path: /srv/http
|
||||
owner: root
|
||||
group: www-data
|
||||
mode: 'u+rwx,g+rs,o-rwx'
|
||||
state: directory
|
||||
path: /srv/http
|
||||
owner: root
|
||||
group: www-data
|
||||
mode: 'u+rwx,g+rs,o-rwx'
|
||||
state: directory
|
||||
|
||||
- name: create letsencrypt dir
|
||||
file:
|
||||
path: /srv/http/common/letsencrypt
|
||||
owner: root
|
||||
group: www-data
|
||||
mode: 'u+rwx,g+rs,o-rwx'
|
||||
state: directory
|
||||
path: /srv/http/common/letsencrypt
|
||||
owner: root
|
||||
group: www-data
|
||||
mode: 'u+rwx,g+rs,o-rwx'
|
||||
state: directory
|
||||
|
||||
- include_tasks: vhosts.yml
|
||||
|
||||
@@ -1,12 +1,14 @@
|
||||
---
|
||||
|
||||
- name: symlink vhosts
|
||||
file:
|
||||
src: "/etc/nginx/sites-available/{{ item }}.conf"
|
||||
dest: "/etc/nginx/sites-enabled/{{ item }}.conf"
|
||||
force: True
|
||||
follow: False
|
||||
force: true
|
||||
follow: false
|
||||
state: link
|
||||
notify:
|
||||
- restart nginx
|
||||
- restart nginx
|
||||
loop: "{{ web_hostname }}"
|
||||
|
||||
- name: install vhosts
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart nut-client
|
||||
service:
|
||||
name: nut-client
|
||||
state: restarted
|
||||
name: nut-client
|
||||
state: restarted
|
||||
|
||||
@@ -1,19 +1,21 @@
|
||||
---
|
||||
|
||||
- name: install nut client
|
||||
package:
|
||||
name: nut-client
|
||||
state: present
|
||||
name: nut-client
|
||||
state: present
|
||||
|
||||
- name: upsmon.conf file
|
||||
template:
|
||||
src: upsmon.conf.j2
|
||||
dest: /etc/nut/upsmon.conf
|
||||
mode: '0640'
|
||||
src: upsmon.conf.j2
|
||||
dest: /etc/nut/upsmon.conf
|
||||
mode: '0640'
|
||||
notify: restart nut-client
|
||||
|
||||
- name: nut.conf file
|
||||
copy:
|
||||
src: files/nut.conf
|
||||
dest: /etc/nut/nut.conf
|
||||
mode: '0640'
|
||||
src: files/nut.conf
|
||||
dest: /etc/nut/nut.conf
|
||||
mode: '0640'
|
||||
when: inventory_hostname not in groups['nut_server']
|
||||
notify: restart nut-client
|
||||
|
||||
@@ -1,12 +1,14 @@
|
||||
---
|
||||
|
||||
- name: restart nut-server
|
||||
service:
|
||||
name: nut-server
|
||||
state: restarted
|
||||
name: nut-server
|
||||
state: restarted
|
||||
|
||||
- name: udev
|
||||
command: "udevadm control --reload-rules && udevadm trigger"
|
||||
|
||||
- name: restart nut-driver
|
||||
service:
|
||||
name: nut-driver
|
||||
state: restarted
|
||||
name: nut-driver
|
||||
state: restarted
|
||||
|
||||
@@ -1,40 +1,42 @@
|
||||
---
|
||||
|
||||
- name: install nut server
|
||||
package:
|
||||
name: nut-server
|
||||
state: present
|
||||
name: nut-server
|
||||
state: present
|
||||
|
||||
- name: udev conf file for nut
|
||||
copy:
|
||||
src: files/90-nut-ups.rules
|
||||
dest: /etc/udev/rules.d/90-nut-ups.rules
|
||||
src: files/90-nut-ups.rules
|
||||
dest: /etc/udev/rules.d/90-nut-ups.rules
|
||||
notify:
|
||||
- udev
|
||||
- restart nut-driver
|
||||
- udev
|
||||
- restart nut-driver
|
||||
|
||||
- name: nut.conf file
|
||||
copy:
|
||||
src: files/nut.conf
|
||||
dest: /etc/nut/nut.conf
|
||||
mode: '0640'
|
||||
src: files/nut.conf
|
||||
dest: /etc/nut/nut.conf
|
||||
mode: '0640'
|
||||
notify: restart nut-server
|
||||
|
||||
- name: ups.conf file
|
||||
copy:
|
||||
src: files/ups.conf
|
||||
dest: /etc/nut/ups.conf
|
||||
mode: '0640'
|
||||
src: files/ups.conf
|
||||
dest: /etc/nut/ups.conf
|
||||
mode: '0640'
|
||||
notify: restart nut-server
|
||||
|
||||
- name: upsd.conf file
|
||||
copy:
|
||||
src: files/upsd.conf
|
||||
dest: /etc/nut/upsd.conf
|
||||
mode: '0640'
|
||||
src: files/upsd.conf
|
||||
dest: /etc/nut/upsd.conf
|
||||
mode: '0640'
|
||||
notify: restart nut-server
|
||||
|
||||
- name: upsd.users file
|
||||
template:
|
||||
src: upsd.users.j2
|
||||
dest: /etc/nut/upsd.users
|
||||
mode: '0640'
|
||||
src: upsd.users.j2
|
||||
dest: /etc/nut/upsd.users
|
||||
mode: '0640'
|
||||
notify: restart nut-server
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart opendkim
|
||||
service:
|
||||
name: opendkim
|
||||
state: restarted
|
||||
name: opendkim
|
||||
state: restarted
|
||||
|
||||
@@ -1,32 +1,33 @@
|
||||
---
|
||||
|
||||
- name: install opendkim
|
||||
package:
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
loop:
|
||||
- opendkim
|
||||
- opendkim-tools
|
||||
- opendkim
|
||||
- opendkim-tools
|
||||
|
||||
- name: main configuration files
|
||||
template:
|
||||
src: opendkim.conf
|
||||
dest: /etc/opendkim.conf
|
||||
src: opendkim.conf
|
||||
dest: /etc/opendkim.conf
|
||||
notify:
|
||||
- restart opendkim
|
||||
- restart opendkim
|
||||
|
||||
- name: dkim directory
|
||||
file:
|
||||
path: /etc/dkim
|
||||
state: directory
|
||||
path: /etc/dkim
|
||||
state: directory
|
||||
|
||||
- name: secondary configuration files
|
||||
copy:
|
||||
src: "./files/dkim/{{ item }}"
|
||||
dest: "/etc/dkim/{{ item }}"
|
||||
src: "./files/dkim/{{ item }}"
|
||||
dest: "/etc/dkim/{{ item }}"
|
||||
loop:
|
||||
- KeyTable
|
||||
- PeerList
|
||||
- SigningTable
|
||||
- TrustedHosts
|
||||
- KeyTable
|
||||
- PeerList
|
||||
- SigningTable
|
||||
- TrustedHosts
|
||||
notify:
|
||||
- restart opendkim
|
||||
|
||||
- restart opendkim
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart opendmarc
|
||||
service:
|
||||
name: opendmarc
|
||||
state: restarted
|
||||
name: opendmarc
|
||||
state: restarted
|
||||
|
||||
@@ -1,26 +1,27 @@
|
||||
---
|
||||
|
||||
- name: install opendmarc
|
||||
package:
|
||||
name: opendmarc
|
||||
state: present
|
||||
name: opendmarc
|
||||
state: present
|
||||
|
||||
- name: opendmarc config file
|
||||
copy:
|
||||
src: ./files/opendmarc.conf
|
||||
dest: /etc/opendmarc.conf
|
||||
src: ./files/opendmarc.conf
|
||||
dest: /etc/opendmarc.conf
|
||||
notify:
|
||||
- restart opendmarc
|
||||
- restart opendmarc
|
||||
|
||||
- name: dmarc directory
|
||||
file:
|
||||
path: /etc/dmarc
|
||||
state: directory
|
||||
path: /etc/dmarc
|
||||
state: directory
|
||||
|
||||
- name: secondary configuration files
|
||||
copy:
|
||||
src: "./files/dmarc/{{ item }}"
|
||||
dest: "/etc/dmarc/{{ item }}"
|
||||
src: "./files/dmarc/{{ item }}"
|
||||
dest: "/etc/dmarc/{{ item }}"
|
||||
loop:
|
||||
- IgnoreHosts
|
||||
- IgnoreHosts
|
||||
notify:
|
||||
- restart opendmarc
|
||||
|
||||
- restart opendmarc
|
||||
|
||||
@@ -1 +1,3 @@
|
||||
---
|
||||
|
||||
php_modules: "['opcache', 'mysql', 'mbstring', 'gd']"
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart php-fpm
|
||||
service:
|
||||
name: "php{{ php_version }}-fpm"
|
||||
state: restarted
|
||||
name: "php{{ php_version }}-fpm"
|
||||
state: restarted
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: install php-fpm
|
||||
package:
|
||||
name: php-fpm
|
||||
@@ -5,17 +7,17 @@
|
||||
|
||||
- name: configure php-fpm
|
||||
template:
|
||||
src: www.conf.j2
|
||||
dest: /etc/php/{{ php_version }}/fpm/pool.d/www.conf
|
||||
src: www.conf.j2
|
||||
dest: /etc/php/{{ php_version }}/fpm/pool.d/www.conf
|
||||
notify:
|
||||
- restart php-fpm
|
||||
- restart php-fpm
|
||||
|
||||
- name: configure php
|
||||
copy:
|
||||
src: ./files/php.ini
|
||||
dest: /etc/php/{{ php_version }}/fpm/php.ini
|
||||
src: ./files/php.ini
|
||||
dest: /etc/php/{{ php_version }}/fpm/php.ini
|
||||
notify:
|
||||
- restart php-fpm
|
||||
- restart php-fpm
|
||||
|
||||
- name: install lib for php
|
||||
package:
|
||||
@@ -23,5 +25,4 @@
|
||||
state: present
|
||||
loop: "{{ php_modules }}"
|
||||
notify:
|
||||
- restart php-fpm
|
||||
|
||||
- restart php-fpm
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: postmap virtual-regexp
|
||||
command: postmap /etc/postfix/virtual-regexp
|
||||
listen: "postmap files"
|
||||
@@ -8,7 +10,5 @@
|
||||
|
||||
- name: restart postfix
|
||||
service:
|
||||
name: postfix
|
||||
state: restarted
|
||||
|
||||
|
||||
name: postfix
|
||||
state: restarted
|
||||
|
||||
@@ -1,39 +1,40 @@
|
||||
---
|
||||
|
||||
- name: install postfix
|
||||
package:
|
||||
name: postfix
|
||||
state: present
|
||||
name: postfix
|
||||
state: present
|
||||
|
||||
- name: install mailutils
|
||||
package:
|
||||
name: mailutils
|
||||
state: present
|
||||
name: mailutils
|
||||
state: present
|
||||
|
||||
- name: main configuration files
|
||||
copy:
|
||||
src: "./files/{{ item }}"
|
||||
dest: "/etc/postfix/{{ item }}"
|
||||
src: "./files/{{ item }}"
|
||||
dest: "/etc/postfix/{{ item }}"
|
||||
loop:
|
||||
- main.cf
|
||||
- master.cf
|
||||
- main.cf
|
||||
- master.cf
|
||||
notify:
|
||||
- restart postfix
|
||||
- restart postfix
|
||||
|
||||
- name: map files
|
||||
copy:
|
||||
src: "./files/{{ item }}"
|
||||
dest: "/etc/postfix/{{ item }}"
|
||||
src: "./files/{{ item }}"
|
||||
dest: "/etc/postfix/{{ item }}"
|
||||
loop:
|
||||
- transport
|
||||
- virtual-regexp
|
||||
- transport
|
||||
- virtual-regexp
|
||||
notify:
|
||||
- postmap files
|
||||
- restart postfix
|
||||
- postmap files
|
||||
- restart postfix
|
||||
|
||||
- name: mail generation script
|
||||
copy:
|
||||
src: ./files/generate_email.sh
|
||||
dest: /usr/local/bin/generate_email.sh
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0755'
|
||||
|
||||
src: ./files/generate_email.sh
|
||||
dest: /usr/local/bin/generate_email.sh
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0755'
|
||||
|
||||
@@ -1 +1,3 @@
|
||||
---
|
||||
|
||||
pg_version: "{% if ansible_facts['os_family'] == 'Debian' and ansible_facts['distribution_major_version'] == '9' %}9.6{% elif ansible_facts['os_family'] == 'Debian' and ansible_facts['distribution_major_version'] == '10' %}11{% elif ansible_facts['os_family'] == 'Debian' and ansible_facts['distribution_major_version'] == '11' %}13{% endif %}"
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart postgres
|
||||
service:
|
||||
name: "postgresql@{{ pg_version }}-main"
|
||||
state: restarted
|
||||
name: "postgresql@{{ pg_version }}-main"
|
||||
state: restarted
|
||||
|
||||
@@ -1,7 +1,9 @@
|
||||
---
|
||||
|
||||
- name: install postgresql
|
||||
package:
|
||||
name: postgresql
|
||||
state: present
|
||||
name: postgresql
|
||||
state: present
|
||||
|
||||
- name: create pgsql directory
|
||||
file:
|
||||
@@ -12,35 +14,35 @@
|
||||
|
||||
- name: populate postgresql directory
|
||||
command: "/usr/lib/postgresql/{{ pg_version }}/bin/initdb -E UTF-8 /srv/postgresql/"
|
||||
become: yes
|
||||
become: true
|
||||
become_user: postgres
|
||||
args:
|
||||
creates: /srv/postgresql/PG_VERSION
|
||||
creates: /srv/postgresql/PG_VERSION
|
||||
notify: restart postgres
|
||||
|
||||
- name: replace main conffile
|
||||
copy:
|
||||
src: files/postgresql.conf
|
||||
dest: "/etc/postgresql/{{ pg_version }}/main/postgresql.conf"
|
||||
src: files/postgresql.conf
|
||||
dest: "/etc/postgresql/{{ pg_version }}/main/postgresql.conf"
|
||||
notify: restart postgres
|
||||
|
||||
- name: replace pg_hba file
|
||||
copy:
|
||||
src: files/pg_hba.conf
|
||||
dest: "/etc/postgresql/{{ pg_version }}/main/pg_hba.conf"
|
||||
src: files/pg_hba.conf
|
||||
dest: "/etc/postgresql/{{ pg_version }}/main/pg_hba.conf"
|
||||
notify: restart postgres
|
||||
|
||||
- name: create backup dir
|
||||
file:
|
||||
path: /srv/backup/pgsql
|
||||
owner: postgres
|
||||
group: postgres
|
||||
state: directory
|
||||
path: /srv/backup/pgsql
|
||||
owner: postgres
|
||||
group: postgres
|
||||
state: directory
|
||||
|
||||
- name: backup pg databases
|
||||
cron:
|
||||
user: postgres
|
||||
minute: "0"
|
||||
hour: "4"
|
||||
name: PG Backup
|
||||
job: "/usr/bin/pg_dumpall | gzip -c > /srv/backup/pgsql/all.dbs.gz"
|
||||
user: postgres
|
||||
minute: "0"
|
||||
hour: "4"
|
||||
name: PG Backup
|
||||
job: "/usr/bin/pg_dumpall | gzip -c > /srv/backup/pgsql/all.dbs.gz"
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart rsyslog
|
||||
service:
|
||||
name: rsyslog
|
||||
state: restarted
|
||||
name: rsyslog
|
||||
state: restarted
|
||||
|
||||
@@ -1,19 +1,21 @@
|
||||
---
|
||||
|
||||
- name: install rsyslog
|
||||
package:
|
||||
name: rsyslog
|
||||
state: present
|
||||
name: rsyslog
|
||||
state: present
|
||||
|
||||
- name: put log concentration file
|
||||
copy:
|
||||
src: files/sys.conf
|
||||
dest: /etc/rsyslog.d/sys.conf
|
||||
src: files/sys.conf
|
||||
dest: /etc/rsyslog.d/sys.conf
|
||||
notify: restart rsyslog
|
||||
when: "'rsyslogservers' in group_names"
|
||||
|
||||
- name: put rsyslog config file
|
||||
copy:
|
||||
src: files/remote.conf
|
||||
dest: /etc/rsyslog.d/remote.conf
|
||||
src: files/remote.conf
|
||||
dest: /etc/rsyslog.d/remote.conf
|
||||
notify: restart rsyslog
|
||||
|
||||
- name: insert hosts into /etc/hosts
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
pretty_named_hosts:
|
||||
- name: enbarr
|
||||
address: 10.233.212.50
|
||||
|
||||
@@ -1,8 +1,9 @@
|
||||
---
|
||||
|
||||
- name: restart postfix
|
||||
service:
|
||||
name: postfix
|
||||
state: restarted
|
||||
name: postfix
|
||||
state: restarted
|
||||
|
||||
- name: postmap sasl_passwd
|
||||
command: postmap /etc/postfix/sasl_passwd
|
||||
|
||||
|
||||
@@ -1,25 +1,27 @@
|
||||
---
|
||||
|
||||
- name: install postfix smtp server
|
||||
package:
|
||||
name: postfix
|
||||
state: present
|
||||
name: postfix
|
||||
state: present
|
||||
|
||||
- name: install libsasl2
|
||||
package:
|
||||
name: libsasl2-modules
|
||||
state: present
|
||||
name: libsasl2-modules
|
||||
state: present
|
||||
|
||||
- name: install sasl_passwd file
|
||||
template:
|
||||
src: sasl_passwd.j2
|
||||
dest: /etc/postfix/sasl_passwd
|
||||
mode: 0640
|
||||
src: sasl_passwd.j2
|
||||
dest: /etc/postfix/sasl_passwd
|
||||
mode: 0640
|
||||
notify:
|
||||
- postmap sasl_passwd
|
||||
- restart postfix
|
||||
- postmap sasl_passwd
|
||||
- restart postfix
|
||||
|
||||
- name: install default postfix main.cf
|
||||
template:
|
||||
src: main.cf.j2
|
||||
dest: /etc/postfix/main.cf
|
||||
mode: 0644
|
||||
src: main.cf.j2
|
||||
dest: /etc/postfix/main.cf
|
||||
mode: 0644
|
||||
notify: restart postfix
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: restart sshd
|
||||
service:
|
||||
name: sshd
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: install https transport for apt
|
||||
package:
|
||||
name: apt-transport-https
|
||||
|
||||
@@ -1,5 +1,7 @@
|
||||
---
|
||||
|
||||
- name: install aptitude
|
||||
package:
|
||||
name: aptitude
|
||||
state: present
|
||||
name: aptitude
|
||||
state: present
|
||||
when: ansible_facts['os_family'] == 'Debian'
|
||||
|
||||
@@ -1,6 +1,8 @@
|
||||
---
|
||||
|
||||
- name: copy basic bashrc files
|
||||
copy:
|
||||
src: files/dotbashrc
|
||||
dest: /root/.bashrc
|
||||
owner: root
|
||||
group: root
|
||||
src: files/dotbashrc
|
||||
dest: /root/.bashrc
|
||||
owner: root
|
||||
group: root
|
||||
|
||||
@@ -1,10 +1,11 @@
|
||||
---
|
||||
|
||||
- name: install cron-apt
|
||||
package:
|
||||
name: cron-apt
|
||||
state: present
|
||||
name: cron-apt
|
||||
state: present
|
||||
|
||||
- name: default configuration file
|
||||
copy:
|
||||
src: files/5-install
|
||||
dest: /etc/cron-apt/action.d/5-install
|
||||
|
||||
src: files/5-install
|
||||
dest: /etc/cron-apt/action.d/5-install
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: install cron
|
||||
package:
|
||||
name: cron
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: install curl
|
||||
package:
|
||||
name: curl
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: install gpg package
|
||||
package:
|
||||
name: gpg
|
||||
state: present
|
||||
name: gpg
|
||||
state: present
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: install htop
|
||||
package:
|
||||
name: htop
|
||||
state: present
|
||||
name: htop
|
||||
state: present
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: Set default locale to fr_FR.UTF-8
|
||||
debconf:
|
||||
name: locales
|
||||
@@ -13,8 +15,8 @@
|
||||
vtype: multiselect
|
||||
- name: delete original locale.gen
|
||||
file:
|
||||
path: /etc/locale.gen
|
||||
state: absent
|
||||
path: /etc/locale.gen
|
||||
state: absent
|
||||
when: ansible_facts['env']['LANG'] != 'fr_FR.UTF-8'
|
||||
|
||||
- name: update original locale.gen
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- file:
|
||||
src: /usr/share/zoneinfo/Europe/Paris
|
||||
dest: /etc/localtime
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: install ping utility
|
||||
package:
|
||||
name: iputils-ping
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: ssh configuration file
|
||||
template:
|
||||
src: sshd_config.j2
|
||||
@@ -7,15 +9,15 @@
|
||||
|
||||
- name: ssh keys home
|
||||
authorized_key:
|
||||
user: root
|
||||
state: present
|
||||
key: "{{ lookup('file', 'ssh/home.id_rsa.pub') }}"
|
||||
user: root
|
||||
state: present
|
||||
key: "{{ lookup('file', 'ssh/home.id_rsa.pub') }}"
|
||||
|
||||
- name: ssh keys work
|
||||
authorized_key:
|
||||
user: root
|
||||
state: present
|
||||
key: "{{ lookup('file', 'ssh/work.id_rsa.pub') }}"
|
||||
user: root
|
||||
state: present
|
||||
key: "{{ lookup('file', 'ssh/work.id_rsa.pub') }}"
|
||||
|
||||
- name: remove old work key
|
||||
authorized_key:
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: install telnet
|
||||
package:
|
||||
name: telnet
|
||||
|
||||
@@ -1,7 +1,9 @@
|
||||
---
|
||||
|
||||
- name: install vim package
|
||||
package:
|
||||
name: vim
|
||||
state: present
|
||||
name: vim
|
||||
state: present
|
||||
|
||||
- name: copy vimrc config file
|
||||
copy:
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: install wget package
|
||||
package:
|
||||
name: wget
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: Add APT Key for Unifi
|
||||
get_url:
|
||||
url: https://dl.ui.com/unifi/unifi-repo.gpg
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: reload udev
|
||||
command: "{{ item }}"
|
||||
loop:
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: USB Udev rules
|
||||
copy:
|
||||
src: files/50-usb.rules
|
||||
|
||||
@@ -1,9 +1,11 @@
|
||||
---
|
||||
|
||||
- name: restart nginx
|
||||
service:
|
||||
name: nginx
|
||||
state: restarted
|
||||
name: nginx
|
||||
state: restarted
|
||||
|
||||
- name: restart php-fpm
|
||||
service:
|
||||
name: "php{{ php_version }}-fpm"
|
||||
state: restarted
|
||||
name: "php{{ php_version }}-fpm"
|
||||
state: restarted
|
||||
|
||||
@@ -1,3 +1,5 @@
|
||||
---
|
||||
|
||||
- name: include ttrss for web1
|
||||
include_tasks: ttrss.yml
|
||||
when: inventory_hostname == 'web1.dmz.mateu.be'
|
||||
|
||||
@@ -1,6 +1,8 @@
|
||||
---
|
||||
|
||||
- name: crontab for matomo
|
||||
cron:
|
||||
name: Matomo reports
|
||||
user: www-data
|
||||
minute: "5"
|
||||
job: "/usr/bin/php /srv/http/analyse.nintendojo.fr/console core:archive > /dev/null"
|
||||
name: Matomo reports
|
||||
user: www-data
|
||||
minute: "5"
|
||||
job: "/usr/bin/php /srv/http/analyse.nintendojo.fr/console core:archive > /dev/null"
|
||||
|
||||
@@ -1,6 +1,8 @@
|
||||
---
|
||||
|
||||
- name: php-fpm nextcloud specific configuration
|
||||
copy:
|
||||
src: files/oc.conf
|
||||
dest: "/etc/php/{{ php_version }}/fpm/pool.d/oc.conf"
|
||||
src: files/oc.conf
|
||||
dest: "/etc/php/{{ php_version }}/fpm/pool.d/oc.conf"
|
||||
notify:
|
||||
- restart php-fpm
|
||||
- restart php-fpm
|
||||
|
||||
@@ -1,10 +1,12 @@
|
||||
---
|
||||
|
||||
- name: install scootaloo
|
||||
copy:
|
||||
src: files/bin/scootaloo
|
||||
dest: "{{ scootaloo_bin_path }}"
|
||||
owner: root
|
||||
group: www-data
|
||||
mode: 0750
|
||||
src: files/bin/scootaloo
|
||||
dest: "{{ scootaloo_bin_path }}"
|
||||
owner: root
|
||||
group: www-data
|
||||
mode: 0750
|
||||
|
||||
- name: put configuration file
|
||||
template:
|
||||
@@ -31,8 +33,7 @@
|
||||
|
||||
- name: cron for scootaloo
|
||||
cron:
|
||||
name: Scootaloo Dojo
|
||||
user: www-data
|
||||
minute: "*/5"
|
||||
job: "{{ scootaloo_bin_path }} > /dev/null"
|
||||
|
||||
name: Scootaloo Dojo
|
||||
user: www-data
|
||||
minute: "*/5"
|
||||
job: "{{ scootaloo_bin_path }} > /dev/null"
|
||||
|
||||
@@ -1,7 +1,9 @@
|
||||
---
|
||||
|
||||
- name: cron for tootctl
|
||||
cron:
|
||||
name: Mastodon tootctl
|
||||
minute: "0"
|
||||
hour: "19"
|
||||
weekday: "5"
|
||||
job: "COMPOSE_HTTP_TIMEOUT=360 docker-compose -f /srv/docker/m.nintendojo.fr/docker-compose.yml run --rm web bin/tootctl media remove"
|
||||
name: Mastodon tootctl
|
||||
minute: "0"
|
||||
hour: "19"
|
||||
weekday: "5"
|
||||
job: "COMPOSE_HTTP_TIMEOUT=360 docker-compose -f /srv/docker/m.nintendojo.fr/docker-compose.yml run --rm web bin/tootctl media remove"
|
||||
|
||||
@@ -1,16 +1,17 @@
|
||||
---
|
||||
|
||||
- name: systemd file for backend
|
||||
copy:
|
||||
src: files/ttrss_backend.service
|
||||
dest: /etc/systemd/system/ttrss_backend.service
|
||||
src: files/ttrss_backend.service
|
||||
dest: /etc/systemd/system/ttrss_backend.service
|
||||
|
||||
- name: enable and start service ttrss_backend
|
||||
service:
|
||||
name: ttrss_backend
|
||||
enabled: true
|
||||
state: started
|
||||
name: ttrss_backend
|
||||
enabled: true
|
||||
state: started
|
||||
|
||||
- name: install git
|
||||
package:
|
||||
name: git
|
||||
state: present
|
||||
|
||||
name: git
|
||||
state: present
|
||||
|
||||
@@ -1,13 +1,15 @@
|
||||
---
|
||||
|
||||
- name: nginx cache
|
||||
copy:
|
||||
src: files/fastcgi_cache.conf
|
||||
dest: /etc/nginx/conf.d/fastcgi_cache.conf
|
||||
src: files/fastcgi_cache.conf
|
||||
dest: /etc/nginx/conf.d/fastcgi_cache.conf
|
||||
notify:
|
||||
- restart nginx
|
||||
- restart nginx
|
||||
|
||||
- name: wordpress cron
|
||||
cron:
|
||||
name: "WP Twitter refresh"
|
||||
user: www-data
|
||||
minute: "*/2"
|
||||
job: "/usr/bin/wget -q -O - https://www.nintendojo.fr/wp-cron.php &> /dev/null"
|
||||
name: "WP Twitter refresh"
|
||||
user: www-data
|
||||
minute: "*/2"
|
||||
job: "/usr/bin/wget -q -O - https://www.nintendojo.fr/wp-cron.php &> /dev/null"
|
||||
|
||||
@@ -1,30 +1,32 @@
|
||||
---
|
||||
|
||||
- name: install z-push repokey
|
||||
apt_key:
|
||||
url: https://download.kopano.io/zhub/z-push%3A/final/Debian_10/Release.key
|
||||
state: present
|
||||
url: https://download.kopano.io/zhub/z-push%3A/final/Debian_10/Release.key
|
||||
state: present
|
||||
|
||||
- name: install z-push repo
|
||||
apt_repository:
|
||||
repo: deb https://download.kopano.io/zhub/z-push:/final/Debian_10/ /
|
||||
state: present
|
||||
repo: deb https://download.kopano.io/zhub/z-push:/final/Debian_10/ /
|
||||
state: present
|
||||
|
||||
- name: install z-push packages
|
||||
package:
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
loop:
|
||||
- z-push-autodiscover
|
||||
- z-push-backend-caldav
|
||||
- z-push-backend-carddav
|
||||
- z-push-backend-combined
|
||||
- z-push-backend-imap
|
||||
- z-push-common
|
||||
- z-push-ipc-sharedmemory
|
||||
- z-push-state-sql
|
||||
- z-push-autodiscover
|
||||
- z-push-backend-caldav
|
||||
- z-push-backend-carddav
|
||||
- z-push-backend-combined
|
||||
- z-push-backend-imap
|
||||
- z-push-common
|
||||
- z-push-ipc-sharedmemory
|
||||
- z-push-state-sql
|
||||
|
||||
- name: log directory
|
||||
file:
|
||||
path: /var/log/z-push/
|
||||
owner: www-data
|
||||
group: www-data
|
||||
state: directory
|
||||
path: /var/log/z-push/
|
||||
owner: www-data
|
||||
group: www-data
|
||||
state: directory
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
---
|
||||
|
||||
- name: install acme.sh
|
||||
shell: curl https://get.acme.sh | INSTALLONLINE=1 LE_WORKING_DIR=/etc/x509 sh
|
||||
args:
|
||||
creates: /etc/x509
|
||||
|
||||
|
||||
@@ -1,4 +1,6 @@
|
||||
---
|
||||
|
||||
- name: restart prosody
|
||||
service:
|
||||
name: prosody
|
||||
state: restarted
|
||||
name: prosody
|
||||
state: restarted
|
||||
|
||||
@@ -1,10 +1,12 @@
|
||||
---
|
||||
|
||||
- name: install prosody
|
||||
package:
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
name: "{{ item }}"
|
||||
state: present
|
||||
loop:
|
||||
- prosody
|
||||
- prosody-modules
|
||||
- prosody
|
||||
- prosody-modules
|
||||
|
||||
- name: create dhparam
|
||||
shell: /usr/bin/openssl dhparam -out /etc/prosody/certs/dh-2048.pem 2048
|
||||
@@ -13,15 +15,14 @@
|
||||
|
||||
- name: right management for dh params
|
||||
file:
|
||||
path: /etc/prosody/certs/dh-2048.pem
|
||||
owner: root
|
||||
group: prosody
|
||||
mode: '0640'
|
||||
path: /etc/prosody/certs/dh-2048.pem
|
||||
owner: root
|
||||
group: prosody
|
||||
mode: '0640'
|
||||
|
||||
- name: prosody configuration files
|
||||
copy:
|
||||
src: ./files/prosody.cfg.lua
|
||||
dest: /etc/prosody/prosody.cfg.lua
|
||||
src: ./files/prosody.cfg.lua
|
||||
dest: /etc/prosody/prosody.cfg.lua
|
||||
notify:
|
||||
- restart prosody
|
||||
|
||||
- restart prosody
|
||||
|
||||
Reference in New Issue
Block a user