jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-04-04 12:23:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2023-06-29 10:00

Browse Source
This commit is contained in:
Daniel Berteaud 2023-06-29 10:00:34 +02:00
parent 0df76a72de
commit 3e527570d2
53 changed files with 336 additions and 107 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
roles/babashka/defaults/main.yml
View File

@ -1,8 +1,8 @@
---
# Babashka version to deploy
bb_version: 1.3.180
bb_version: 1.3.181
# URL of the archive
bb_archive_url: https://github.com/babashka/babashka/releases/download/v{{ bb_version }}/babashka-{{ bb_version }}-linux-amd64-static.tar.gz
# Expected sha256sum of the archive
bb_archive_sha256: 828eb9a3efd315fc2a392d1ea582b316d673fba3bbdb92d0421a35c7159c4b31
bb_archive_sha256: fb7fb2b6f525833f1cf5aae285ba95e97428fa079ddd7d65e1fdd1376e2373aa

11
roles/common/vars/Debian-12.yml Normal file
View File

@ -0,0 +1,11 @@
---
system_distro_utils:
- apt-transport-https
- openssh-client
- netcat-openbsd
- xz-utils
- liblz4-tool
- sshfs
- zstd
- cron

4
roles/consul/defaults/main.yml
View File

@ -1,11 +1,11 @@
---
# Version of consul to deploy
consul_version: 1.15.3
consul_version: 1.16.0
# URL from where the consul archive will be downloaded
consul_archive_url: https://releases.hashicorp.com/consul/{{ consul_version }}/consul_{{ consul_version }}_linux_amd64.zip
# Expected sha256 of the archive
consul_archive_sha256: 86c6fe308d2e4eea106d21e20c307726eb87be87eab1f6dfb0d53db81b31d334
consul_archive_sha256: c112d1b2ffcfa7d98cde5508bec3bce383ed3650290cc8be3cfe682b79bb13f1
# user account under which consul will run (will be created if needed)
consul_user: consul

4
roles/consul_template/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,4 @@
---
consul_tpl_packages:
- zip

4
roles/docker_compose/defaults/main.yml
View File

@ -1,4 +1,4 @@
---
docker_compose_version: 1.29.2
docker_compose_bin_sha256: f3f10cf3dbb8107e9ba2ea5f23c1d2159ff7321d16f0a23051d68d8e2547b323
docker_compose_version: 2.19.0
docker_compose_bin_sha256: 34e3b754d13eab683222f67827e20f640dfe0630b3b786c49a9de3f7fc7400a6

4
roles/docker_compose/tasks/main.yml
View File

@ -6,7 +6,7 @@
tags: docker
- name: Detect docker-compose version
shell: docker-compose -v | perl -ne '/version (\d+(\.\d+)+),/ && print "$1\n"'
shell: docker-compose -v | perl -ne '/version v?(\d+(\.\d+)+),?/ && print "$1\n"'
register: docker_compose_current_version
changed_when: False
when: docker_compose_bin.stat.exists
@ -19,7 +19,7 @@
- name: Install docker-compose
get_url:
url: https://github.com/docker/compose/releases/download/{{ docker_compose_version }}/docker-compose-Linux-x86_64
url: https://github.com/docker/compose/releases/download/v{{ docker_compose_version }}/docker-compose-linux-x86_64
dest: /usr/local/bin/docker-compose
mode: 0755
checksum: sha256:{{ docker_compose_bin_sha256 }}

7
roles/drbd/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,7 @@
---
drbd_packages:
- kmod-drbd90
- drbd-utils
- drbd-udev
- drbd-bash-completion

4
roles/drbd_reactor/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,4 @@
---
drbd_reactor_packages:
- drbd-reactor

4
roles/etherpad/defaults/main.yml
View File

@ -8,11 +8,11 @@ etherpad_root_dir: /opt/etherpad_{{ etherpad_id }}
# Unix account under which etherpad will run. The user will be created if it doesn't exist
etherpad_user: etherpad_{{ etherpad_id }}
# Version to deploy
etherpad_version: 1.8.18
etherpad_version: 1.9.1
# URL from where the archive will be downloaded
etherpad_archive_url: https://github.com/ether/etherpad-lite/archive/{{ etherpad_version }}.tar.gz
# Expected sha256 of the archive, to check the download were OK
etherpad_archive_sha256: 67ccc0bac94e146b26fbddcf8330e0f543a4ff82213c420a376644614a7ff2c4
etherpad_archive_sha256: 667741235a2bcd8d28a32f5e611b82fb2ea7d11525ff41b8b5478b05a987b047
# Port on which the service will listen
etherpad_port: 9003
# List of IP/CIDR for which the port will be opened (if iptables_manage == True)

6
roles/gitea/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,6 @@
---
gitea_packages:
- git
- git-lfs
gitea_scl_cmd: ''

35
roles/httpd_php/defaults/main.yml
View File

@ -1,40 +1,5 @@
---
httpd_php_common_modules:
- cli
- ldap
- imap
- gd
- xml
- xmlrpc
- soap
- opcache
- fpm
- mbstring
- mysqlnd
- pgsql
- json
- bcmath
- intl
- pear
- process
- snmp
- pecl-memcached
- pecl-zip
- pecl-apcu
- pecl-imagick
httpd_php_versions:
- 56
- 70
- 71
- 72
- 73
- 74
- 80
- 81
- 82
httpd_php_default_version: 82
#httpd_php_ansible_pools:

9
roles/httpd_php/tasks/main.yml
View File

@ -1,5 +1,14 @@
---
# Load distribution specific variables
- include_vars: "{{ item }}"
with_first_found:
- "{{ role_path }}/vars/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}.yml"
- "{{ role_path }}/vars/{{ ansible_os_family }}-{{ ansible_distribution_major_version }}.yml"
- "{{ role_path }}/vars/{{ ansible_distribution }}.yml"
- "{{ role_path }}/vars/{{ ansible_os_family }}.yml"
tags: web
- name: Build the list of packages
set_fact:
httpd_php_packages: "{{ httpd_php_packages | default([]) + [ 'php' ~ item.0 ~ '-php-' ~ item.1 ] }}"

37
roles/httpd_php/vars/RedHat-7.yml Normal file
View File

@ -0,0 +1,37 @@
---
httpd_php_common_modules:
- cli
- ldap
- imap
- gd
- xml
- xmlrpc
- soap
- opcache
- fpm
- mbstring
- mysqlnd
- pgsql
- json
- bcmath
- intl
- pear
- process
- snmp
- pecl-memcached
- pecl-zip
- pecl-apcu
- pecl-imagick
httpd_php_versions:
- 56
- 70
- 71
- 72
- 73
- 74
- 80
- 81
- 82

37
roles/httpd_php/vars/RedHat-8.yml Normal file
View File

@ -0,0 +1,37 @@
---
httpd_php_common_modules:
- cli
- ldap
- imap
- gd
- xml
- xmlrpc
- soap
- opcache
- fpm
- mbstring
- mysqlnd
- pgsql
- json
- bcmath
- intl
- pear
- process
- snmp
- pecl-memcached
- pecl-zip
- pecl-apcu
- pecl-imagick
httpd_php_versions:
- 56
- 70
- 71
- 72
- 73
- 74
- 80
- 81
- 82

32
roles/httpd_php/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,32 @@
---
httpd_php_common_modules:
- cli
- ldap
- imap
- gd
- xml
- xmlrpc
- soap
- opcache
- fpm
- mbstring
- mysqlnd
- pgsql
- json
- bcmath
- intl
- pear
- process
- snmp
- pecl-memcached
- pecl-zip
- pecl-apcu
- pecl-imagick
httpd_php_versions:
- 74
- 80
- 81
- 82

6
roles/includes/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,6 @@
---
webapps_mysql_packages:
- python3-mysqlclient
- "{{ (mysql_engine is defined and mysql_engine == 'mysql') | ternary('mysql','mariadb') }}"

9
roles/includes/webapps_webconf.yml
View File

@ -1,4 +1,13 @@
---
- include_vars: "{{ item }}"
with_first_found:
- ../httpd_php/vars/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}.yml
- ../httpd_php/vars/{{ ansible_os_family }}-{{ ansible_distribution_major_version }}.yml
- ../httpd_php/vars/{{ ansible_distribution }}.yml
- ../httpd_php/vars/{{ ansible_os_family }}.yml
- ../httpd_php/vars/defaults.yml
- name: Deploy httpd configuration
template: src=httpd.conf.j2 dest=/etc/httpd/ansible_conf.d/10-{{ app_id }}.conf
notify: reload httpd

9
roles/kimai/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,9 @@
---
kimai_packages:
- mariadb
- tar
- rsync
- acl
- zstd
- git

4
roles/ldap2pg/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,4 @@
---
ldap2pg_packages:
- ldap2pg

6
roles/letsencrypt/vars/Debian-12.yml Normal file
View File

@ -0,0 +1,6 @@
---
letsencrypt_packages:
- python3-pip
- python3-setuptools
- curl

5
roles/letsencrypt/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,5 @@
---
letsencrypt_packages:
- dehydrated
- python3-dns-lexicon

6
roles/linstor_controller/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,6 @@
---
linctl_packages:
- linstor-controller
- linstor-client
- tmpwatch

8
roles/linstor_satellite/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,8 @@
---
linsat_packages:
- linstor-satellite
- lvm2
- cryptsetup
- vdo
- kmod-kvdo

4
roles/matrix_element/defaults/main.yml
View File

@ -5,8 +5,8 @@
element_id: element
# Version to deploy, and expected sha256
element_version: 1.11.33
element_archive_sha256: 9dd9fee2e1e70144960d21f7ee565c103cdd13a3d8f7a97b0e6b34f85f6eeb15
element_version: 1.11.34
element_archive_sha256: 627e02f34469707100da7df60aaa15599a7e99513ad115ef161dff2ea11db35c
# Where to install element
element_root_dir: /opt/matrix/element

2
roles/matrix_synapse/defaults/main.yml
View File

@ -1,7 +1,7 @@
---
# Synapse version to deploy
synapse_version: '1.85.2'
synapse_version: '1.86.0'
# Should ansible handle Synapse upgrades ? If false, only initial install will be done
synapse_manage_upgrade: True

28
roles/matrix_synapse/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,28 @@
---
synapse_packages:
- libtiff-devel
- libjpeg-devel
- libzip-devel
- freetype-devel
- lcms2-devel
- libwebp-devel
- tcl-devel
- tk-devel
- libffi-devel
- openssl-devel
- libxslt-devel
- gcc
- gcc-c++
- libtool
- autoconf
- automake
- postgresql15
- postgresql-devel
- jemalloc
- python3-pip
- python3-devel
synapse_jemalloc: /usr/lib64/libjemalloc.so.2
synapse_python: /usr/bin/python3.9
synapse_venv_lib_dir: "{{ synapse_root_dir }}/venv/lib/python3.9/site-packages/"

4
roles/miniflux/defaults/main.yml
View File

@ -1,11 +1,11 @@
---
# Version to install
miniflux_version: 2.0.44
miniflux_version: 2.0.45
# URL of the binary to install
miniflux_bin_url: https://github.com/miniflux/v2/releases/download/{{ miniflux_version }}/miniflux-linux-amd64
# Expected sha256 of the binary
miniflux_bin_sha256: 1a7fb7db4f1590cb9889c9eb3ba368360da8fc911bb78c90e7aa471d3505c23e
miniflux_bin_sha256: 88699075efaed7b79986a2bfd072a17553065a2c7c151287465c1f659aa45cc9
# Should ansible handle upgrades ? If false, only initial install will be done
miniflux_manage_upgrade: True

12
roles/nomad/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,12 @@
---
nomad_task_driver_packages:
java:
- java-17-openjdk-headless
qemu:
- qemu-kvm
podman:
- podman
- podman-docker
containerd-driver:
- containerd.io

6
roles/ntp_client/vars/Debian-12.yml Normal file
View File

@ -0,0 +1,6 @@
---
ntp_ntpd_service: ntp
ntp_chrony_service: chrony
ntp_chrony_conf: /etc/chrony/chrony.conf
ntp_chrony_keyfile: /etc/chrony/chrony.keys

5
roles/offen/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,5 @@
---
offen_packages:
- tar
- zstd

4
roles/paperless_ng/defaults/main.yml
View File

@ -1,13 +1,13 @@
---
# The version to deploy
paperless_version: 1.15.0
paperless_version: 1.16.5
# Instance ID, as you can deploy several instances on the same server
paperless_id: 1
# URL of the paperless archive
paperless_archive_url: https://github.com/paperless-ngx/paperless-ngx/releases/download/v{{ paperless_version }}/paperless-ngx-v{{ paperless_version }}.tar.xz
# Expected checksum
paperless_archive_sha256: 0080f6b117d427a9f60ca42c5c3571e0f75de04a40b6eabd1975483955d58ec8
paperless_archive_sha256: 32afe72291a2c0bb765f0b5cdd3aa0069ea2d8a2c5579d4f89168ab8b53dd8ef
# Should ansible handle install and upgrades, or only initial install
paperless_manage_upgrade: True
# Root directory where paperless will be installed

8
roles/repo_base/tasks/epel_RedHat-8.yml
View File

@ -4,9 +4,9 @@
yum_repository:
name: epel
description: "Extra Package for Enterprise Linux"
baseurl: https://fr2.rpmfind.net/linux/epel/$releasever/Everything/$basearch https://mirror.in2p3.fr/pub/epel/$releasever/Everything/$basearch
baseurl: http://mirrors.ircam.fr/pub/fedora/epel/$releasever/Everything/$basearch http://mir01.syntis.net/epel/$releasever/Everything/$basearch https://fr2.rpmfind.net/linux/epel/$releasever/Everything/$basearch https://mirror.in2p3.fr/pub/epel/$releasever/Everything/$basearch
gpgcheck: True
gpgkey: https://mirror.in2p3.fr/pub/epel/RPM-GPG-KEY-EPEL-8
gpgkey: https://mir01.syntis.net/epel/RPM-GPG-KEY-EPEL-8
exclude: dehydrated
tags: repo
@ -14,7 +14,7 @@
yum_repository:
name: epel-modular
description: "Extra Packages for Enterprise Linux Modular $releasever - $basearch"
baseurl: https://fr2.rpmfind.net/linux/epel/$releasever/Modular/$basearch https://mirror.in2p3.fr/pub/epel/$releasever/Modular/$basearch
baseurl: http://mirrors.ircam.fr/pub/fedora/epel/$releasever/Modular/$basearch http://mir01.syntis.net/epel/$releasever/Modular/$basearch https://fr2.rpmfind.net/linux/epel/$releasever/Modular/$basearch https://mirror.in2p3.fr/pub/epel/$releasever/Modular/$basearch
gpgcheck: True
gpgkey: https://mirror.in2p3.fr/pub/epel/RPM-GPG-KEY-EPEL-8
gpgkey: https://mir01.syntis.net/epel/RPM-GPG-KEY-EPEL-8
tags: repo

3
roles/repo_remi/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,3 @@
---
repo_remi_gpg_url: https://rpms.remirepo.net/RPM-GPG-KEY-remi2021

3
roles/repo_zabbix/tasks/Debian.yml
View File

@ -15,6 +15,7 @@
- name: Add Zabbix Agent2 plugins repo
apt_repository:
repo: deb http://repo.zabbix.com/zabbix-agent2-plugins/1/{{ ansible_distribution | lower }} {{ ansible_distribution_release }} main
# Zabbix plugin repo doesn't have bookworm yet, so use bullseye for now in this case
repo: deb http://repo.zabbix.com/zabbix-agent2-plugins/1/{{ ansible_distribution | lower }} {{ (ansible_distribution_major_version is version('12', '>=')) | ternary('bullseye', ansible_distribution_release) }} main
filename: zabbix
tags: repo,zabbix

4
roles/repo_zabbix/tasks/RedHat.yml
View File

@ -18,7 +18,7 @@
description: Zabbix Agent2 plugins Repository
baseurl: http://repo.zabbix.com/zabbix-agent2-plugins/1/rhel/$releasever/$basearch/
gpgcheck: True
gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-zabbix
gpgkey: "{{ zabbix_plugin_key }}"
priority: 50
includepkgs:
- zabbix*
@ -31,7 +31,7 @@
file: zabbix
baseurl: http://repo.zabbix.com/zabbix/{{ zabbix_major_version }}/rhel/$releasever/$basearch/frontend
gpgcheck: True
gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-zabbix
gpgkey: "{{ zabbix_repo_key }}"
priority: 50
includepkgs:
- zabbix*

1
roles/repo_zabbix/vars/RedHat-7.yml
View File

@ -1,3 +1,4 @@
---
zabbix_repo_key: https://repo.zabbix.com/RPM-GPG-KEY-ZABBIX-79EA5ED4
zabbix_plugin_key: https://repo.zabbix.com/RPM-GPG-KEY-ZABBIX-A14FE591

1
roles/repo_zabbix/vars/RedHat-8.yml
View File

@ -1,3 +1,4 @@
---
zabbix_repo_key: https://repo.zabbix.com/RPM-GPG-KEY-ZABBIX-79EA5ED4
zabbix_plugin_key: https://repo.zabbix.com/RPM-GPG-KEY-ZABBIX-A14FE591

1
roles/repo_zabbix/vars/RedHat-9.yml
View File

@ -1,3 +1,4 @@
---
zabbix_repo_key: https://repo.zabbix.com/RPM-GPG-KEY-ZABBIX-08EFA7DD
zabbix_plugin_key: https://repo.zabbix.com/RPM-GPG-KEY-ZABBIX-A14FE591

2
roles/seafile/defaults/main.yml
View File

@ -11,7 +11,7 @@
# MaxUsers = "9"
# Mode = "subscription"
# etc...
seafile_version: "{{ seafile_license is defined | ternary('10.0.5','10.0.1') }}"
seafile_version: "{{ seafile_license is defined | ternary('10.0.6','10.0.1') }}"
# Archive URL and sha256 are only used for the community version
seafile_archive_url: https://s3.eu-central-1.amazonaws.com/download.seadrive.org/seafile-server_{{ seafile_version }}_x86-64.tar.gz

3
roles/seafile/files/seafile-pro-server_10.0.5_x86-64_CentOS.tar.gz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1769a7734571c0abaecc71dafcbc3683a150951f7196eb626bc21ab658958f97
size 144175847

3
roles/seafile/files/seafile-pro-server_10.0.6_x86-64_CentOS.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:0af3b246ad27fbc49b39ceb6da313404fb6df380a7ab387a44b395dfd4814519
size 143913267

22
roles/seafile/tasks/install.yml
View File

@ -35,7 +35,6 @@
- name: Install or update python modules in the virtualenv
pip:
state: "{{ (seafile_install_mode == 'upgrade') | ternary('latest', 'present') }}"
virtualenv: "{{ seafile_root_dir }}"
virtualenv_command: /bin/python3.9 -m venv
name: "{{ seafile_python_libs }}"
@ -44,27 +43,6 @@
- restart seahub
tags: seafile
- name: Installer version specific python modules
pip:
virtualenv: "{{ seafile_root_dir }}"
virtualenv_command: /bin/python3.9 -m venv
name:
- future==0.18.*
- mysqlclient==2.1.*
- pillow==9.3.*
- captcha==0.4
- django_simple_captcha==0.5.*
- djangosaml2==1.5.*
- pysaml2==7.2.*
- pycryptodome==3.16.*
- cffi==1.15.1
- SQLAlchemy==1.4.3
- chardet
notify:
- restart seafile
- restart seahub
tags: seafile
- name: Install Seafile pro license
copy: content={{ seafile_license }} dest={{ seafile_root_dir }}/seafile-license.txt
when:

19
roles/seafile/vars/RedHat-8.yml
View File

@ -13,6 +13,7 @@ seafile_packages:
- mysql-devel
- zlib-devel
- openldap-devel
- openssl-devel
- gcc
- tar
- mariadb
@ -23,20 +24,24 @@ seafile_packages:
- python3-setuptools # needed for ansible to create the venv
seafile_python_libs:
- Pillow
- pillow==9.3.*
- pylibmc
- captcha
- captcha==0.4
- jinja2
- sqlalchemy
- SQLAlchemy==1.4.3
- psd-tools
- django-pylibmc
- django-simple-captcha
- django_simple_captcha==0.5.*
- djangosaml2==1.5.*
- pysaml2==7.2.*
- python-ldap
- requests_oauthlib
- future
- mysqlclient
- pycryptodome
- future==0.18.*
- mysqlclient==2.1.*
- pycryptodome==3.16.*
- cffi==1.15.1
- lxml
- chardet
seafile_rm_libs:
- liblber-2.4.so.2

4
roles/sftpgo/defaults/main.yml
View File

@ -1,11 +1,11 @@
---
# Version to deploy
sftpgo_version: 2.5.1
sftpgo_version: 2.5.2
# URL of the archive
sftpgo_archive_url: https://github.com/drakkan/sftpgo/releases/download/v{{ sftpgo_version }}/sftpgo_v{{ sftpgo_version }}_linux_x86_64.tar.xz
# Expected sha1 of the archive
sftpgo_archive_sha256: 48d3f8e589a883cfed231fc06b7445a67e524ad6c7e8606f249af3cb7d8a722d
sftpgo_archive_sha256: b55e25addc4a9db6f49b869274a6b15294e2a0c7335b242be736c51ddca22835
# Should ansible handle upgrades ? If False, only initial install will be done
sftpgo_manage_upgrade: True

6
roles/squash_tm/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,6 @@
---
squashtm_packages:
- java-11-openjdk
- tar
- zstd

12
roles/squid/tasks/main.yml
View File

@ -10,6 +10,12 @@
notify: restart squid
tags: proxy
# Before 1.34.6-3 provided by EPEL, the service was handled by a init script and the service was named ufdb
- name: Check if the systemd unit is installed
stat: path=/lib/systemd/system/ufdbGuard.service
register: squid_ufdb_unit
tags: proxy
- name: Identify intercept HTTP ports (if any)
set_fact: squid_intercept_http_ports={{ squid_http_ports | selectattr('port','defined') | selectattr('mode','defined') | selectattr('mode','equalto','intercept') | map(attribute='port') | list }}
tags: firewall,proxy
@ -246,12 +252,6 @@
service: name=squid-clamd state={{ squid_scan_av | ternary('started','stopped') }} enabled={{ squid_scan_av | ternary(True,False) }}
tags: proxy
# Before 1.34.6-3 provided by EPEL, the service was handled by a init script and the service was named ufdb
- name: Check if the systemd unit is installed
stat: path=/lib/systemd/system/ufdbGuard.service
register: squid_ufdb_unit
tags: proxy
- name: Handle ufdb daemon
service: name={{ squid_ufdb_unit.stat.exists | ternary('ufdbGuard','ufdb') }} state={{ squid_filter_url | ternary('started','stopped') }} enabled={{ squid_filter_url | ternary(True,False) }}
tags: proxy

4
roles/squid/templates/ufdb_update.sh.j2
View File

@ -1,7 +1,7 @@
#!/bin/sh
{% if squid_ufdb_update_from_univ %}
/usr/bin/rsync -rzPq ftp.univ-tlse1.fr::blacklist/dest/ /var/ufdbguard/blacklists/
/usr/bin/rsync -rzPq ftp.ut-capitole.fr::blacklist/dest/ /var/ufdbguard/blacklists/
{% endif %}
find /var/ufdbguard/blacklists/ -mindepth 1 -maxdepth 1 -type d -exec basename "{}" \;| while read CATEGORY; do
@ -16,5 +16,5 @@ find /var/ufdbguard/blacklists/ -mindepth 1 -maxdepth 1 -type d -exec basename "
eval $CMD 2>/dev/null
fi
done
systemctl restart ufdb
systemctl restart {{ squid_ufdb_unit.stat.exists | ternary('ufdbGuard','ufdb') }}
exit 0

2
roles/unifi/meta/main.yml
View File

@ -4,4 +4,4 @@ dependencies:
- role: mkdir
- role: repo_mongodb # MongoDB isn't in base repo anymore on EL8
vars:
- mongo_major_version: 3.4 # Unifi recommends Mong 3.4
- mongo_major_version: 3.6 # Unifi recommends Mong 3.6

4
roles/vault/defaults/main.yml
View File

@ -1,11 +1,11 @@
---
# Version of Vault to install
vault_version: 1.13.1
vault_version: 1.14.0
# URL of the archive
vault_archive_url: https://releases.hashicorp.com/vault/{{ vault_version }}/vault_{{ vault_version }}_linux_amd64.zip
# Expected sha256 of the archive
vault_archive_sha256: cf1015d0b30806515120d4a86672ea77da1fb0559e3839ba88d8e02e94e796a6
vault_archive_sha256: 3d5c27e35d8ed43d861e892fc7d8f888f2fda4319a36f344f8c09603fb184b50
# Root dir where Nomad will be installed
vault_root_dir: /opt/vault

2
roles/wapt_server/tasks/conf.yml
View File

@ -103,7 +103,7 @@
tags: wapt
- name: Deploy WAPT Repo rsync secret
copy: content=wapt:{{ wapt_rsync_pass }} dest=/opt/wapt/conf/rsync.secrets mode=400
copy: content=wapt:{{ wapt_rsync_pass }} dest=/opt/wapt/conf/rsync.secrets mode=400 owner=root group=root
when: wapt_rsync_pass is defined
tags: wapt

2
roles/wkhtmltopdf/vars/RedHat-8.yml
View File

@ -1,3 +1,3 @@
---
wkhtmltopdf_package_url: https://github.com/wkhtmltopdf/packaging/releases/download/{{ wkhtmltopdf_version }}/wkhtmltox-{{ wkhtmltopdf_version }}.centos8.x86_64.rpm
wkhtmltopdf_package_url: https://github.com/wkhtmltopdf/packaging/releases/download/{{ wkhtmltopdf_version }}/wkhtmltox-{{ wkhtmltopdf_version }}.almalinux8.x86_64.rpm

3
roles/wkhtmltopdf/vars/RedHat-9.yml Normal file
View File

@ -0,0 +1,3 @@
---
wkhtmltopdf_package_url: https://github.com/wkhtmltopdf/packaging/releases/download/{{ wkhtmltopdf_version }}/wkhtmltox-{{ wkhtmltopdf_version }}.almalinux9.x86_64.rpm

14
roles/zabbix_agent/vars/Debian-12.yml Normal file
View File

@ -0,0 +1,14 @@
---
zabbix_agent_packages:
- openssl
- git
- libconfig-simple-perl
- libjson-perl
- libfile-which-perl
- smartmontools
- lm-sensors
- patch
- fping
- libstatistics-descriptive-perl
- libtimedate-perl