mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-07-26 15:55:56 +02:00
Update to 2021-12-01 19:13
This commit is contained in:
21
roles/rabbitmq_server/templates/dehydrated_hook.sh.j2
Normal file
21
roles/rabbitmq_server/templates/dehydrated_hook.sh.j2
Normal file
@@ -0,0 +1,21 @@
|
||||
#!/bin/bash -e
|
||||
|
||||
{% if rabbitmq_letsencrypt_cert is defined %}
|
||||
|
||||
{% if rabbitmq_letsencrypt_cert == True %}
|
||||
{% set cert = inventory_hostname %}
|
||||
{% elif rabbitmq_letsencrypt_cert is string %}
|
||||
{% set cert = rabbitmq_letsencrypt_cert %}
|
||||
{% endif %}
|
||||
|
||||
if [ $1 == "{{ cert }}" ]; then
|
||||
cp /var/lib/dehydrated/certificates/certs/{{ cert }}/chain.pem /etc/rabbitmq/ssl/chain.pem
|
||||
cp /var/lib/dehydrated/certificates/certs/{{ cert }}/cert.pem /etc/rabbitmq/ssl/cert.pem
|
||||
cp /var/lib/dehydrated/certificates/certs/{{ cert }}/privkey.pem /etc/rabbitmq/ssl/key.pem
|
||||
chown :rabbitmq /etc/rabbitmq/ssl/key.pem
|
||||
chmod 644 /etc/rabbitmq/ssl/{cert,chain}.pem
|
||||
chmod 640 /etc/rabbitmq/ssl/key.pem
|
||||
systemctl restart rabbitmq-server
|
||||
fi
|
||||
{% endif %}
|
||||
|
1
roles/rabbitmq_server/templates/enabled_plugins.j2
Normal file
1
roles/rabbitmq_server/templates/enabled_plugins.j2
Normal file
@@ -0,0 +1 @@
|
||||
[{{ rabbitmq_plugins | join(',') }}].
|
8
roles/rabbitmq_server/templates/post-backup.j2
Normal file
8
roles/rabbitmq_server/templates/post-backup.j2
Normal file
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash -e
|
||||
|
||||
{% if rabbitmq_conf == 'rabbitmq.conf' %}
|
||||
rm -f /home/lbkp/rabbitmq/definitions.json
|
||||
{% else %}
|
||||
# RabbitMQ version too old to support export_definitions
|
||||
{% endif %}
|
||||
|
11
roles/rabbitmq_server/templates/pre-backup.j2
Normal file
11
roles/rabbitmq_server/templates/pre-backup.j2
Normal file
@@ -0,0 +1,11 @@
|
||||
#!/bin/sh
|
||||
|
||||
set -eo pipefail
|
||||
|
||||
{% if rabbitmq_conf == 'rabbitmq.conf' %}
|
||||
mkdir -p /home/lbkp/rabbitmq/
|
||||
/usr/sbin/rabbitmqctl export_definitions --format json definitions.json
|
||||
mv /var/lib/rabbitmq/definitions.json /home/lbkp/rabbitmq/
|
||||
{% else %}
|
||||
# RabbitMQ version too old to support export_definitions
|
||||
{% endif %}
|
10
roles/rabbitmq_server/templates/rabbitmq.conf.j2
Normal file
10
roles/rabbitmq_server/templates/rabbitmq.conf.j2
Normal file
@@ -0,0 +1,10 @@
|
||||
listeners.tcp.default = {{ rabbitmq_port }}
|
||||
listeners.ssl.default = {{ rabbitmq_ssl_port }}
|
||||
{% if rabbitmq_ssl_cacert_path is defined %}
|
||||
ssl_options.cacertfile = {{ rabbitmq_ssl_cacert_path }}
|
||||
{% endif %}
|
||||
ssl_options.certfile = {{ rabbitmq_ssl_cert_path }}
|
||||
ssl_options.keyfile = {{ rabbitmq_ssl_key_path }}
|
||||
loopback_users.guest = {{ rabbitmq_guest_from_anywhere | ternary('false','true') }}
|
||||
management.tcp.port = {{ rabbitmq_web_port }}
|
||||
management.tcp.ip = 0.0.0.0
|
12
roles/rabbitmq_server/templates/rabbitmq.config.j2
Normal file
12
roles/rabbitmq_server/templates/rabbitmq.config.j2
Normal file
@@ -0,0 +1,12 @@
|
||||
%% {{ ansible_managed }}
|
||||
|
||||
[
|
||||
{rabbit, [
|
||||
{tcp_listeners, [{{ rabbitmq_port }}]}
|
||||
,{reverse_dns_lookups, false}
|
||||
{% if rabbitmq_guest_from_anywhere %}
|
||||
,{loopback_users, []}
|
||||
{% endif %}
|
||||
]
|
||||
}
|
||||
].
|
Reference in New Issue
Block a user