slfhst/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

style: linting

Browse Source
This commit is contained in:
VC
2024-07-05 11:53:13 +02:00
parent 66830fd2eb
commit 1f28d2242f
76 changed files with 469 additions and 335 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
roles/firewall/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: reload firewall
openwrt_init:
name: firewall
state: reloaded
name: firewall
state: reloaded

6
roles/firewall/tasks/main.yml
View File

@@ -1,5 +1,7 @@
---
- name: generate firewall file
template:
src: firewall.j2
dest: /etc/config/firewall
src: firewall.j2
dest: /etc/config/firewall
notify: reload firewall

2
roles/ftp/handlers/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: restart vsftpd
service:
name: vsftpd

14
roles/ftp/tasks/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: Install vsftpd
package:
name: vsftpd
@@ -5,15 +7,15 @@
- name: Create ftp directory
file:
path: /srv/ftp
state: directory
path: /srv/ftp
state: directory
- name: Create upload directory
file:
path: /srv/ftp/upload
owner: ftp
group: root
state: directory
path: /srv/ftp/upload
owner: ftp
group: root
state: directory
- name: Config vsftpd
copy:

2
roles/haproxy/handlers/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: restart haproxy
service:
name: haproxy

2
roles/haproxy/tasks/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: install haproxy package
package:
name: haproxy

2
roles/icecast2/defaults/main.yml
View File

@@ -1,3 +1,5 @@
---
source_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
36383738646636353839616365316537653865666335353136666166336137636635663062626265

6
roles/icecast2/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart icecast2
service:
name: icecast2
state: restarted
name: icecast2
state: restarted

13
roles/icecast2/tasks/main.yml
View File

@@ -1,12 +1,13 @@
---
- name: install icecast2
package:
name: icecast2
state: present
name: icecast2
state: present
- name: configuration file
template:
src: icecast.xml.j2
dest: /etc/icecast2/icecast.xml
src: icecast.xml.j2
dest: /etc/icecast2/icecast.xml
notify:
- restart icecast2
- restart icecast2

6
roles/mailman/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart mailman3
service:
name: mailman3
state: restarted
name: mailman3
state: restarted

6
roles/mailman/tasks/main.yml
View File

@@ -1,7 +1,9 @@
---
- name: install mailman3 and dependencies
package:
name: "{{ item }}"
state: present
name: "{{ item }}"
state: present
loop:
- mailman3-full
- sqlite3

2
roles/mariadb/defaults/main.yml
View File

@@ -1,3 +1,5 @@
---
mariadb_backup_hour: 5
mariadb_backup_minute: 0
mariadb_query_cache_memory: 64

6
roles/mariadb/handlers/main.yml
View File

@@ -1,7 +1,9 @@
---
- name: restart mariadb
service:
name: mariadb
state: restarted
name: mariadb
state: restarted
- name: daemon-reload
command: systemctl daemon-reload

51
roles/mariadb/tasks/main.yml
View File

@@ -1,34 +1,36 @@
---
- name: install mariadb
package:
name: mariadb-server
state: present
name: mariadb-server
state: present
- name: create mysql directory
file:
path: /srv/mysql
owner: mysql
group: mysql
state: directory
path: /srv/mysql
owner: mysql
group: mysql
state: directory
- name: populate mysql directory
command: /usr/bin/mysql_install_db --datadir=/srv/mysql
args:
creates: /srv/mysql/ibdata1
creates: /srv/mysql/ibdata1
notify: restart mariadb
- name: replace conffile
template:
src: 50-server.cnf.j2
dest: /etc/mysql/mariadb.conf.d/50-server.cnf
src: 50-server.cnf.j2
dest: /etc/mysql/mariadb.conf.d/50-server.cnf
notify: restart mariadb
- name: debian upgrade file conf
template:
src: debian.cnf.j2
dest: /etc/mysql/debian.cnf
owner: root
group: root
mode: '0600'
src: debian.cnf.j2
dest: /etc/mysql/debian.cnf
owner: root
group: root
mode: '0600'
notify: restart mariadb
- name: force handlers
@@ -36,8 +38,8 @@
- name: install python-mysql
package:
name: python3-pymysql
state: present
name: python3-pymysql
state: present
- name: check if .my.cnf file exists
stat:
@@ -98,15 +100,14 @@
- name: install backup script
copy:
src: files/backup_mysql.sh
dest: /usr/local/bin/backup_mysql.sh
mode: '0755'
src: files/backup_mysql.sh
dest: /usr/local/bin/backup_mysql.sh
mode: '0755'
- name: cron backup script
cron:
name: "MariaDB backup"
hour: "{{ mariadb_backup_hour }}"
minute: "{{ mariadb_backup_minute }}"
job: "/usr/local/bin/backup_mysql.sh"
state: present
name: "MariaDB backup"
hour: "{{ mariadb_backup_hour }}"
minute: "{{ mariadb_backup_minute }}"
job: "/usr/local/bin/backup_mysql.sh"
state: present

2
roles/mumble/handlers/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: restart mumble
service:
name: mumble-server

12
roles/mumble/tasks/main.yml
View File

@@ -1,11 +1,13 @@
---
- name: install mumble
package:
name: mumble-server
state: present
name: mumble-server
state: present
- name: configuration files
copy:
src: ./files/mumble-server.ini
dest: /etc/mumble-server.ini
src: ./files/mumble-server.ini
dest: /etc/mumble-server.ini
notify:
- restart mumble
- restart mumble

6
roles/munin-client/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart munin-node
service:
name: munin-node
state: restarted
name: munin-node
state: restarted

14
roles/munin-client/tasks/hypervisors.yml
View File

@@ -1,13 +1,15 @@
---
- name: delete squid plugins
shell:
cmd: "rm -f /etc/munin/plugins/squid_*"
warn: False
cmd: "rm -f /etc/munin/plugins/squid_*"
warn: false
notify:
- restart munin-node
- restart munin-node
- name: delete lxc interfaces plugins
shell:
cmd: "rm -f /etc/munin/plugins/if_*veth* /etc/munin/plugins/if_*fw* /etc/munin/plugins/if_*vmbr*"
warn: False
cmd: "rm -f /etc/munin/plugins/if_*veth* /etc/munin/plugins/if_*fw* /etc/munin/plugins/if_*vmbr*"
warn: false
notify:
- restart munin-node
- restart munin-node

3
roles/munin-client/tasks/mikrotik.yml
View File

@@ -1,4 +1,5 @@
# For Munin servers
---
- name: deploy mikrotik unitary scripts
copy:
src: "./files/{{ item.0 }}"

16
roles/munin-client/tasks/physical_servers.yml
View File

@@ -1,16 +1,16 @@
---
# for physical servers
- name: install necessary packages for hypervisors
package:
name: lm-sensors
state: present
name: lm-sensors
state: present
- name: configure specific munin plugin
file:
path: "/etc/munin/plugins/sensors_{{ item }}"
src: /usr/share/munin/plugins/sensors_
state: link
path: "/etc/munin/plugins/sensors_{{ item }}"
src: /usr/share/munin/plugins/sensors_
state: link
notify:
- restart munin-node
- restart munin-node
loop:
- temp
- temp

11
roles/munin-server/tasks/main.yml
View File

@@ -1,10 +1,11 @@
---
- name: install munin packages
package:
name: munin
state: present
name: munin
state: present
- name: munin conf file
template:
src: munin.conf.j2
dest: /etc/munin/munin.conf
src: munin.conf.j2
dest: /etc/munin/munin.conf

2
roles/nginx/handlers/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: restart nginx
service:
name: nginx

32
roles/nginx/tasks/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: install nginx package
package:
name: nginx-full
@@ -15,26 +17,26 @@
notify:
- restart nginx
loop:
- { src: nginx.conf.j2, dest: /etc/nginx/nginx.conf }
- { src: nginx.ssl.conf.j2, dest: /etc/nginx/nginx.ssl.conf }
- { src: fastcgi_params.j2, dest: /etc/nginx/fastcgi_params }
- { src: proxy_params.j2, dest: /etc/nginx/proxy_params }
- { src: default.j2, dest: /etc/nginx/sites-available/default }
- {src: nginx.conf.j2, dest: /etc/nginx/nginx.conf}
- {src: nginx.ssl.conf.j2, dest: /etc/nginx/nginx.ssl.conf}
- {src: fastcgi_params.j2, dest: /etc/nginx/fastcgi_params}
- {src: proxy_params.j2, dest: /etc/nginx/proxy_params}
- {src: default.j2, dest: /etc/nginx/sites-available/default}
- name: create base dir
file:
path: /srv/http
owner: root
group: www-data
mode: 'u+rwx,g+rs,o-rwx'
state: directory
path: /srv/http
owner: root
group: www-data
mode: 'u+rwx,g+rs,o-rwx'
state: directory
- name: create letsencrypt dir
file:
path: /srv/http/common/letsencrypt
owner: root
group: www-data
mode: 'u+rwx,g+rs,o-rwx'
state: directory
path: /srv/http/common/letsencrypt
owner: root
group: www-data
mode: 'u+rwx,g+rs,o-rwx'
state: directory
- include_tasks: vhosts.yml

8
roles/nginx/tasks/vhosts.yml
View File

@@ -1,12 +1,14 @@
---
- name: symlink vhosts
file:
src: "/etc/nginx/sites-available/{{ item }}.conf"
dest: "/etc/nginx/sites-enabled/{{ item }}.conf"
force: True
follow: False
force: true
follow: false
state: link
notify:
- restart nginx
- restart nginx
loop: "{{ web_hostname }}"
- name: install vhosts

6
roles/nut-client/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart nut-client
service:
name: nut-client
state: restarted
name: nut-client
state: restarted

18
roles/nut-client/tasks/main.yml
View File

@@ -1,19 +1,21 @@
---
- name: install nut client
package:
name: nut-client
state: present
name: nut-client
state: present
- name: upsmon.conf file
template:
src: upsmon.conf.j2
dest: /etc/nut/upsmon.conf
mode: '0640'
src: upsmon.conf.j2
dest: /etc/nut/upsmon.conf
mode: '0640'
notify: restart nut-client
- name: nut.conf file
copy:
src: files/nut.conf
dest: /etc/nut/nut.conf
mode: '0640'
src: files/nut.conf
dest: /etc/nut/nut.conf
mode: '0640'
when: inventory_hostname not in groups['nut_server']
notify: restart nut-client

10
roles/nut-server/handlers/main.yml
View File

@@ -1,12 +1,14 @@
---
- name: restart nut-server
service:
name: nut-server
state: restarted
name: nut-server
state: restarted
- name: udev
command: "udevadm control --reload-rules && udevadm trigger"
- name: restart nut-driver
service:
name: nut-driver
state: restarted
name: nut-driver
state: restarted

38
roles/nut-server/tasks/main.yml
View File

@@ -1,40 +1,42 @@
---
- name: install nut server
package:
name: nut-server
state: present
name: nut-server
state: present
- name: udev conf file for nut
copy:
src: files/90-nut-ups.rules
dest: /etc/udev/rules.d/90-nut-ups.rules
src: files/90-nut-ups.rules
dest: /etc/udev/rules.d/90-nut-ups.rules
notify:
- udev
- restart nut-driver
- udev
- restart nut-driver
- name: nut.conf file
copy:
src: files/nut.conf
dest: /etc/nut/nut.conf
mode: '0640'
src: files/nut.conf
dest: /etc/nut/nut.conf
mode: '0640'
notify: restart nut-server
- name: ups.conf file
copy:
src: files/ups.conf
dest: /etc/nut/ups.conf
mode: '0640'
src: files/ups.conf
dest: /etc/nut/ups.conf
mode: '0640'
notify: restart nut-server
- name: upsd.conf file
copy:
src: files/upsd.conf
dest: /etc/nut/upsd.conf
mode: '0640'
src: files/upsd.conf
dest: /etc/nut/upsd.conf
mode: '0640'
notify: restart nut-server
- name: upsd.users file
template:
src: upsd.users.j2
dest: /etc/nut/upsd.users
mode: '0640'
src: upsd.users.j2
dest: /etc/nut/upsd.users
mode: '0640'
notify: restart nut-server

6
roles/opendkim/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart opendkim
service:
name: opendkim
state: restarted
name: opendkim
state: restarted

35
roles/opendkim/tasks/main.yml
View File

@@ -1,32 +1,33 @@
---
- name: install opendkim
package:
name: "{{ item }}"
state: present
name: "{{ item }}"
state: present
loop:
- opendkim
- opendkim-tools
- opendkim
- opendkim-tools
- name: main configuration files
template:
src: opendkim.conf
dest: /etc/opendkim.conf
src: opendkim.conf
dest: /etc/opendkim.conf
notify:
- restart opendkim
- restart opendkim
- name: dkim directory
file:
path: /etc/dkim
state: directory
path: /etc/dkim
state: directory
- name: secondary configuration files
copy:
src: "./files/dkim/{{ item }}"
dest: "/etc/dkim/{{ item }}"
src: "./files/dkim/{{ item }}"
dest: "/etc/dkim/{{ item }}"
loop:
- KeyTable
- PeerList
- SigningTable
- TrustedHosts
- KeyTable
- PeerList
- SigningTable
- TrustedHosts
notify:
- restart opendkim
- restart opendkim

6
roles/opendmarc/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart opendmarc
service:
name: opendmarc
state: restarted
name: opendmarc
state: restarted

25
roles/opendmarc/tasks/main.yml
View File

@@ -1,26 +1,27 @@
---
- name: install opendmarc
package:
name: opendmarc
state: present
name: opendmarc
state: present
- name: opendmarc config file
copy:
src: ./files/opendmarc.conf
dest: /etc/opendmarc.conf
src: ./files/opendmarc.conf
dest: /etc/opendmarc.conf
notify:
- restart opendmarc
- restart opendmarc
- name: dmarc directory
file:
path: /etc/dmarc
state: directory
path: /etc/dmarc
state: directory
- name: secondary configuration files
copy:
src: "./files/dmarc/{{ item }}"
dest: "/etc/dmarc/{{ item }}"
src: "./files/dmarc/{{ item }}"
dest: "/etc/dmarc/{{ item }}"
loop:
- IgnoreHosts
- IgnoreHosts
notify:
- restart opendmarc
- restart opendmarc

2
roles/php/defaults/main.yml
View File

@@ -1 +1,3 @@
---
php_modules: "['opcache', 'mysql', 'mbstring', 'gd']"

6
roles/php/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart php-fpm
service:
name: "php{{ php_version }}-fpm"
state: restarted
name: "php{{ php_version }}-fpm"
state: restarted

17
roles/php/tasks/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: install php-fpm
package:
name: php-fpm
@@ -5,17 +7,17 @@
- name: configure php-fpm
template:
src: www.conf.j2
dest: /etc/php/{{ php_version }}/fpm/pool.d/www.conf
src: www.conf.j2
dest: /etc/php/{{ php_version }}/fpm/pool.d/www.conf
notify:
- restart php-fpm
- restart php-fpm
- name: configure php
copy:
src: ./files/php.ini
dest: /etc/php/{{ php_version }}/fpm/php.ini
src: ./files/php.ini
dest: /etc/php/{{ php_version }}/fpm/php.ini
notify:
- restart php-fpm
- restart php-fpm
- name: install lib for php
package:
@@ -23,5 +25,4 @@
state: present
loop: "{{ php_modules }}"
notify:
- restart php-fpm
- restart php-fpm

8
roles/postfix/handlers/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: postmap virtual-regexp
command: postmap /etc/postfix/virtual-regexp
listen: "postmap files"
@@ -8,7 +10,5 @@
- name: restart postfix
service:
name: postfix
state: restarted
name: postfix
state: restarted

43
roles/postfix/tasks/main.yml
View File

@@ -1,39 +1,40 @@
---
- name: install postfix
package:
name: postfix
state: present
name: postfix
state: present
- name: install mailutils
package:
name: mailutils
state: present
name: mailutils
state: present
- name: main configuration files
copy:
src: "./files/{{ item }}"
dest: "/etc/postfix/{{ item }}"
src: "./files/{{ item }}"
dest: "/etc/postfix/{{ item }}"
loop:
- main.cf
- master.cf
- main.cf
- master.cf
notify:
- restart postfix
- restart postfix
- name: map files
copy:
src: "./files/{{ item }}"
dest: "/etc/postfix/{{ item }}"
src: "./files/{{ item }}"
dest: "/etc/postfix/{{ item }}"
loop:
- transport
- virtual-regexp
- transport
- virtual-regexp
notify:
- postmap files
- restart postfix
- postmap files
- restart postfix
- name: mail generation script
copy:
src: ./files/generate_email.sh
dest: /usr/local/bin/generate_email.sh
owner: root
group: root
mode: '0755'
src: ./files/generate_email.sh
dest: /usr/local/bin/generate_email.sh
owner: root
group: root
mode: '0755'

2
roles/postgres/defaults/main.yml
View File

@@ -1 +1,3 @@
---
pg_version: "{% if ansible_facts['os_family'] == 'Debian' and ansible_facts['distribution_major_version'] == '9' %}9.6{% elif ansible_facts['os_family'] == 'Debian' and ansible_facts['distribution_major_version'] == '10' %}11{% elif ansible_facts['os_family'] == 'Debian' and ansible_facts['distribution_major_version'] == '11' %}13{% endif %}"

6
roles/postgres/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart postgres
service:
name: "postgresql@{{ pg_version }}-main"
state: restarted
name: "postgresql@{{ pg_version }}-main"
state: restarted

36
roles/postgres/tasks/main.yml
View File

@@ -1,7 +1,9 @@
---
- name: install postgresql
package:
name: postgresql
state: present
name: postgresql
state: present
- name: create pgsql directory
file:
@@ -12,35 +14,35 @@
- name: populate postgresql directory
command: "/usr/lib/postgresql/{{ pg_version }}/bin/initdb -E UTF-8 /srv/postgresql/"
become: yes
become: true
become_user: postgres
args:
creates: /srv/postgresql/PG_VERSION
creates: /srv/postgresql/PG_VERSION
notify: restart postgres
- name: replace main conffile
copy:
src: files/postgresql.conf
dest: "/etc/postgresql/{{ pg_version }}/main/postgresql.conf"
src: files/postgresql.conf
dest: "/etc/postgresql/{{ pg_version }}/main/postgresql.conf"
notify: restart postgres
- name: replace pg_hba file
copy:
src: files/pg_hba.conf
dest: "/etc/postgresql/{{ pg_version }}/main/pg_hba.conf"
src: files/pg_hba.conf
dest: "/etc/postgresql/{{ pg_version }}/main/pg_hba.conf"
notify: restart postgres
- name: create backup dir
file:
path: /srv/backup/pgsql
owner: postgres
group: postgres
state: directory
path: /srv/backup/pgsql
owner: postgres
group: postgres
state: directory
- name: backup pg databases
cron:
user: postgres
minute: "0"
hour: "4"
name: PG Backup
job: "/usr/bin/pg_dumpall | gzip -c > /srv/backup/pgsql/all.dbs.gz"
user: postgres
minute: "0"
hour: "4"
name: PG Backup
job: "/usr/bin/pg_dumpall | gzip -c > /srv/backup/pgsql/all.dbs.gz"

6
roles/rsyslog/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart rsyslog
service:
name: rsyslog
state: restarted
name: rsyslog
state: restarted

14
roles/rsyslog/tasks/main.yml
View File

@@ -1,19 +1,21 @@
---
- name: install rsyslog
package:
name: rsyslog
state: present
name: rsyslog
state: present
- name: put log concentration file
copy:
src: files/sys.conf
dest: /etc/rsyslog.d/sys.conf
src: files/sys.conf
dest: /etc/rsyslog.d/sys.conf
notify: restart rsyslog
when: "'rsyslogservers' in group_names"
- name: put rsyslog config file
copy:
src: files/remote.conf
dest: /etc/rsyslog.d/remote.conf
src: files/remote.conf
dest: /etc/rsyslog.d/remote.conf
notify: restart rsyslog
- name: insert hosts into /etc/hosts

2
roles/rsyslog/vars/main.yml
View File

@@ -1,3 +1,5 @@
---
pretty_named_hosts:
- name: enbarr
address: 10.233.212.50

7
roles/smtprelay/handlers/main.yml
View File

@@ -1,8 +1,9 @@
---
- name: restart postfix
service:
name: postfix
state: restarted
name: postfix
state: restarted
- name: postmap sasl_passwd
command: postmap /etc/postfix/sasl_passwd

26
roles/smtprelay/tasks/main.yml
View File

@@ -1,25 +1,27 @@
---
- name: install postfix smtp server
package:
name: postfix
state: present
name: postfix
state: present
- name: install libsasl2
package:
name: libsasl2-modules
state: present
name: libsasl2-modules
state: present
- name: install sasl_passwd file
template:
src: sasl_passwd.j2
dest: /etc/postfix/sasl_passwd
mode: 0640
src: sasl_passwd.j2
dest: /etc/postfix/sasl_passwd
mode: 0640
notify:
- postmap sasl_passwd
- restart postfix
- postmap sasl_passwd
- restart postfix
- name: install default postfix main.cf
template:
src: main.cf.j2
dest: /etc/postfix/main.cf
mode: 0644
src: main.cf.j2
dest: /etc/postfix/main.cf
mode: 0644
notify: restart postfix

2
roles/system/handlers/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: restart sshd
service:
name: sshd

2
roles/system/tasks/apt-transport-https.yml
View File

@@ -1,3 +1,5 @@
---
- name: install https transport for apt
package:
name: apt-transport-https

6
roles/system/tasks/aptitude.yml
View File

@@ -1,5 +1,7 @@
---
- name: install aptitude
package:
name: aptitude
state: present
name: aptitude
state: present
when: ansible_facts['os_family'] == 'Debian'

10
roles/system/tasks/bashrc.yml
View File

@@ -1,6 +1,8 @@
---
- name: copy basic bashrc files
copy:
src: files/dotbashrc
dest: /root/.bashrc
owner: root
group: root
src: files/dotbashrc
dest: /root/.bashrc
owner: root
group: root

11
roles/system/tasks/cron-apt.yml
View File

@@ -1,10 +1,11 @@
---
- name: install cron-apt
package:
name: cron-apt
state: present
name: cron-apt
state: present
- name: default configuration file
copy:
src: files/5-install
dest: /etc/cron-apt/action.d/5-install
src: files/5-install
dest: /etc/cron-apt/action.d/5-install

2
roles/system/tasks/cron.yml
View File

@@ -1,3 +1,5 @@
---
- name: install cron
package:
name: cron

2
roles/system/tasks/curl.yml
View File

@@ -1,3 +1,5 @@
---
- name: install curl
package:
name: curl

6
roles/system/tasks/gpg.yml
View File

@@ -1,4 +1,6 @@
---
- name: install gpg package
package:
name: gpg
state: present
name: gpg
state: present

6
roles/system/tasks/htop.yml
View File

@@ -1,4 +1,6 @@
---
- name: install htop
package:
name: htop
state: present
name: htop
state: present

6
roles/system/tasks/locales.yml
View File

@@ -1,3 +1,5 @@
---
- name: Set default locale to fr_FR.UTF-8
debconf:
name: locales
@@ -13,8 +15,8 @@
vtype: multiselect
- name: delete original locale.gen
file:
path: /etc/locale.gen
state: absent
path: /etc/locale.gen
state: absent
when: ansible_facts['env']['LANG'] != 'fr_FR.UTF-8'
- name: update original locale.gen

2
roles/system/tasks/localtime.yml
View File

@@ -1,3 +1,5 @@
---
- file:
src: /usr/share/zoneinfo/Europe/Paris
dest: /etc/localtime

2
roles/system/tasks/ping.yml
View File

@@ -1,3 +1,5 @@
---
- name: install ping utility
package:
name: iputils-ping

14
roles/system/tasks/sshd.yml
View File

@@ -1,3 +1,5 @@
---
- name: ssh configuration file
template:
src: sshd_config.j2
@@ -7,15 +9,15 @@
- name: ssh keys home
authorized_key:
user: root
state: present
key: "{{ lookup('file', 'ssh/home.id_rsa.pub') }}"
user: root
state: present
key: "{{ lookup('file', 'ssh/home.id_rsa.pub') }}"
- name: ssh keys work
authorized_key:
user: root
state: present
key: "{{ lookup('file', 'ssh/work.id_rsa.pub') }}"
user: root
state: present
key: "{{ lookup('file', 'ssh/work.id_rsa.pub') }}"
- name: remove old work key
authorized_key:

2
roles/system/tasks/telnet.yml
View File

@@ -1,3 +1,5 @@
---
- name: install telnet
package:
name: telnet

6
roles/system/tasks/vimrc.yml
View File

@@ -1,7 +1,9 @@
---
- name: install vim package
package:
name: vim
state: present
name: vim
state: present
- name: copy vimrc config file
copy:

2
roles/system/tasks/wget.yml
View File

@@ -1,3 +1,5 @@
---
- name: install wget package
package:
name: wget

2
roles/unifi/tasks/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: Add APT Key for Unifi
get_url:
url: https://dl.ui.com/unifi/unifi-repo.gpg

2
roles/usb/handlers/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: reload udev
command: "{{ item }}"
loop:

2
roles/usb/tasks/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: USB Udev rules
copy:
src: files/50-usb.rules

10
roles/webapps/handlers/main.yml
View File

@@ -1,9 +1,11 @@
---
- name: restart nginx
service:
name: nginx
state: restarted
name: nginx
state: restarted
- name: restart php-fpm
service:
name: "php{{ php_version }}-fpm"
state: restarted
name: "php{{ php_version }}-fpm"
state: restarted

2
roles/webapps/tasks/main.yml
View File

@@ -1,3 +1,5 @@
---
- name: include ttrss for web1
include_tasks: ttrss.yml
when: inventory_hostname == 'web1.dmz.mateu.be'

10
roles/webapps/tasks/matomo.yml
View File

@@ -1,6 +1,8 @@
---
- name: crontab for matomo
cron:
name: Matomo reports
user: www-data
minute: "5"
job: "/usr/bin/php /srv/http/analyse.nintendojo.fr/console core:archive > /dev/null"
name: Matomo reports
user: www-data
minute: "5"
job: "/usr/bin/php /srv/http/analyse.nintendojo.fr/console core:archive > /dev/null"

8
roles/webapps/tasks/nextcloud.yml
View File

@@ -1,6 +1,8 @@
---
- name: php-fpm nextcloud specific configuration
copy:
src: files/oc.conf
dest: "/etc/php/{{ php_version }}/fpm/pool.d/oc.conf"
src: files/oc.conf
dest: "/etc/php/{{ php_version }}/fpm/pool.d/oc.conf"
notify:
- restart php-fpm
- restart php-fpm

21
roles/webapps/tasks/scootaloo.yml
View File

@@ -1,10 +1,12 @@
---
- name: install scootaloo
copy:
src: files/bin/scootaloo
dest: "{{ scootaloo_bin_path }}"
owner: root
group: www-data
mode: 0750
src: files/bin/scootaloo
dest: "{{ scootaloo_bin_path }}"
owner: root
group: www-data
mode: 0750
- name: put configuration file
template:
@@ -31,8 +33,7 @@
- name: cron for scootaloo
cron:
name: Scootaloo Dojo
user: www-data
minute: "*/5"
job: "{{ scootaloo_bin_path }} > /dev/null"
name: Scootaloo Dojo
user: www-data
minute: "*/5"
job: "{{ scootaloo_bin_path }} > /dev/null"

12
roles/webapps/tasks/tootctl.yml
View File

@@ -1,7 +1,9 @@
---
- name: cron for tootctl
cron:
name: Mastodon tootctl
minute: "0"
hour: "19"
weekday: "5"
job: "COMPOSE_HTTP_TIMEOUT=360 docker-compose -f /srv/docker/m.nintendojo.fr/docker-compose.yml run --rm web bin/tootctl media remove"
name: Mastodon tootctl
minute: "0"
hour: "19"
weekday: "5"
job: "COMPOSE_HTTP_TIMEOUT=360 docker-compose -f /srv/docker/m.nintendojo.fr/docker-compose.yml run --rm web bin/tootctl media remove"

17
roles/webapps/tasks/ttrss.yml
View File

@@ -1,16 +1,17 @@
---
- name: systemd file for backend
copy:
src: files/ttrss_backend.service
dest: /etc/systemd/system/ttrss_backend.service
src: files/ttrss_backend.service
dest: /etc/systemd/system/ttrss_backend.service
- name: enable and start service ttrss_backend
service:
name: ttrss_backend
enabled: true
state: started
name: ttrss_backend
enabled: true
state: started
- name: install git
package:
name: git
state: present
name: git
state: present

16
roles/webapps/tasks/wp_dojo.yml
View File

@@ -1,13 +1,15 @@
---
- name: nginx cache
copy:
src: files/fastcgi_cache.conf
dest: /etc/nginx/conf.d/fastcgi_cache.conf
src: files/fastcgi_cache.conf
dest: /etc/nginx/conf.d/fastcgi_cache.conf
notify:
- restart nginx
- restart nginx
- name: wordpress cron
cron:
name: "WP Twitter refresh"
user: www-data
minute: "*/2"
job: "/usr/bin/wget -q -O - https://www.nintendojo.fr/wp-cron.php &> /dev/null"
name: "WP Twitter refresh"
user: www-data
minute: "*/2"
job: "/usr/bin/wget -q -O - https://www.nintendojo.fr/wp-cron.php &> /dev/null"

38
roles/webapps/tasks/z-push.yml
View File

@@ -1,30 +1,32 @@
---
- name: install z-push repokey
apt_key:
url: https://download.kopano.io/zhub/z-push%3A/final/Debian_10/Release.key
state: present
url: https://download.kopano.io/zhub/z-push%3A/final/Debian_10/Release.key
state: present
- name: install z-push repo
apt_repository:
repo: deb https://download.kopano.io/zhub/z-push:/final/Debian_10/ /
state: present
repo: deb https://download.kopano.io/zhub/z-push:/final/Debian_10/ /
state: present
- name: install z-push packages
package:
name: "{{ item }}"
state: present
name: "{{ item }}"
state: present
loop:
- z-push-autodiscover
- z-push-backend-caldav
- z-push-backend-carddav
- z-push-backend-combined
- z-push-backend-imap
- z-push-common
- z-push-ipc-sharedmemory
- z-push-state-sql
- z-push-autodiscover
- z-push-backend-caldav
- z-push-backend-carddav
- z-push-backend-combined
- z-push-backend-imap
- z-push-common
- z-push-ipc-sharedmemory
- z-push-state-sql
- name: log directory
file:
path: /var/log/z-push/
owner: www-data
group: www-data
state: directory
path: /var/log/z-push/
owner: www-data
group: www-data
state: directory

3
roles/x509/tasks/main.yml
View File

@@ -1,5 +1,6 @@
---
- name: install acme.sh
shell: curl https://get.acme.sh | INSTALLONLINE=1 LE_WORKING_DIR=/etc/x509 sh
args:
creates: /etc/x509

6
roles/xmpp/handlers/main.yml
View File

@@ -1,4 +1,6 @@
---
- name: restart prosody
service:
name: prosody
state: restarted
name: prosody
state: restarted

25
roles/xmpp/tasks/main.yml
View File

@@ -1,10 +1,12 @@
---
- name: install prosody
package:
name: "{{ item }}"
state: present
name: "{{ item }}"
state: present
loop:
- prosody
- prosody-modules
- prosody
- prosody-modules
- name: create dhparam
shell: /usr/bin/openssl dhparam -out /etc/prosody/certs/dh-2048.pem 2048
@@ -13,15 +15,14 @@
- name: right management for dh params
file:
path: /etc/prosody/certs/dh-2048.pem
owner: root
group: prosody
mode: '0640'
path: /etc/prosody/certs/dh-2048.pem
owner: root
group: prosody
mode: '0640'
- name: prosody configuration files
copy:
src: ./files/prosody.cfg.lua
dest: /etc/prosody/prosody.cfg.lua
src: ./files/prosody.cfg.lua
dest: /etc/prosody/prosody.cfg.lua
notify:
- restart prosody
- restart prosody