Changeset 3896 in MondoRescue for branches/3.3/ansible
- Timestamp:
- Dec 7, 2024, 2:45:01 AM (5 months ago)
- Location:
- branches/3.3/ansible
- Files:
-
- 33 deleted
- 3 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/3.3/ansible/roles/system/files/mkbkp
r3677 r3896 1 1 #!/bin/bash 2 2 3 for i in mondorescue dploy uuwl pusk ossi pb; do 4 svnadmin dump /prj/svn/$i | gzip -9c > $HOME/$i-svn.dump.gz 3 for i in mondorescue dploy uuwl pusk ossi project-builder; do 5 4 if [ -d /prj/trac/$i.env ]; then 6 5 tar cvfz $HOME/$i-trac.tar.gz /prj/trac/$i.env … … 10 9 tar cvfz $HOME/project-builder-trac.tar.gz /prj/trac/project-builder.env 11 10 # 12 # Sympa13 sudo tar cvfz $HOME/sympa.tar.gz /etc/sympa /var/lib/sympa /var/lib/mysql /usr/share/sympa14 #15 11 cp /prj/trac/trac.* $HOME 16 12 sudo cp -a /usr/local/etc $HOME 17 sudo cp /etc/rsyncd.conf $HOME18 13 sudo cp -a /etc/httpd/conf/vhosts.d $HOME 19 #sudo cp /etc/init.d/ossi $HOME20 sudo cp -a /var/spool/cron $HOME -
branches/3.3/ansible/roles/system/tasks/main.yml
r3795 r3896 1 1 --- 2 3 - name: Check that IP address is setup4 template: src=templates/ifcfg-enp2s0f0 dest=/etc/sysconfig/network-scripts/ifcfg-enp2s0f0 owner=root group=root mode=0600 backup=yes5 tags: system6 7 - name: Check that GW is setup8 template: src=templates/network dest=/etc/sysconfig/network owner=root group=root mode=0600 backup=yes9 tags: system10 11 # Validate the sudoers file before saving12 - name: Check that sudo is configured13 lineinfile: destfile=/etc/sudoers state=present line='{{ item }} ALL=(ALL) NOPASSWD:ALL' validate='visudo -cf %s' mode=0600 backup=yes14 with_items:15 - fwadmin16 - bruno17 tags: system18 19 - name: Check that sshd is installed20 urpmi: name=openssh-server state=installed update_cache=yes no_recommends=yes21 tags: system22 23 - name: Check that sshd is configured24 #lineinfile: destfile=/etc/ssh/sshd_config state=present line='PermitRootLogin prohibit-password' mode=0600 backup=yes25 lineinfile: destfile=/etc/ssh/sshd_config state=present line='PermitRootLogin no' mode=0600 backup=yes26 notify:27 - restart sshd28 tags: system29 30 - name: Ensure the groups exists31 group: name={{ item }} state=present32 tags: system33 with_items:34 - fwadmin35 - bruno36 37 - name: Ensure the accounts exists38 user: name={{ item }} state=present group={{ item }} home=/home/{{ item }} move_home=yes39 tags: system40 with_items:41 - fwadmin42 - bruno43 44 2 - name: Copy special keys for remote access (git...) 45 3 copy: src=/users/bruno/prj/musique-ancienne.org/mondorescue.org/{{ item.f }} dest=/home/bruno/{{ item.f }} mode={{ item.m }} backup=yes owner=bruno group=bruno … … 55 13 - bruno 56 14 tags: system 57 58 - name: Check that sshd is running and enabled59 service: name=sshd state=started enabled=yes60 tags: system61 62 - name: Check that sshutout is installed63 urpmi: name=sshutout state=installed update_cache=yes no_recommends=yes64 tags: system65 66 - name: Check that sshutout is configured67 template: src=templates/sshutout.conf dest=/etc/sshutout.conf owner=root group=root mode=0600 backup=yes68 notify:69 - restart sshutout70 tags: system71 72 - name: Check that sshutout is running and enabled73 service: name=sshutout state=started enabled=yes74 tags: system75 76 - name: Setup backup script77 copy: src=files/{{ item }} dest=/usr/local/bin/{{ item }} owner=root group=root mode=0755 backup=yes78 with_items:79 - mkbkp80 tags: system81 82 - name: Setup autoupdate via cron83 cron: name=urpmi-upd minute=43 hour=03 user=root job="/usr/local/bin/upd" cron_file=urpmi-upd state=present backup=yes84 tags: system85 86 - name: Setup backup for bruno via cron87 cron: name=bkp minute=43 hour=02 user=bruno job="/usr/local/bin/mkbkp" cron_file=bkp state=present backup=yes88 tags: system -
branches/3.3/ansible/site.yml
r3894 r3896 1 1 --- 2 2 - import_playbook: system.yml 3 - import_playbook: urpmi.yml4 - import_playbook: smtp.yml5 - import_playbook: trac.yml6 - import_playbook: vsftpd.yml7 - import_playbook: svn.yml8 - import_playbook: git.yml9 - import_playbook: rsync.yml10 - import_playbook: docker.yml11 - import_playbook: pb.yml12 3 - import_playbook: mageia-docker.yml
Note:
See TracChangeset
for help on using the changeset viewer.