Update to 2021-12-01 19:13

roles/rsync_server/defaults/main.yml

@@ -0,0 +1,4 @@
+---
+
+rsync_port: 873
+rsync_src_ip: []

roles/rsync_server/tasks/main.yml

@@ -0,0 +1,38 @@
+---
+
+- include_vars: "{{ item }}"
+  with_first_found:
+    - vars/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}.yml
+    - vars/{{ ansible_os_family }}-{{ ansible_distribution_major_version }}.yml
+    - vars/{{ ansible_distribution }}.yml
+    - vars/{{ ansible_os_family }}.yml
+  tags: rsync
+
+- name: Install packages
+  package: name={{ rsync_packages }}
+  tags: rsync
+
+- name: Handle rsyncd port
+  iptables_raw:
+    name: rsync_port
+    state: "{{ (rsync_src_ip | length > 0) | ternary('present','absent') }}"
+    rules: "-A INPUT -m state --state NEW -p tcp --dport {{ rsync_port }} -s {{ rsync_src_ip | join(',') }} -j ACCEPT"
+  when: iptables_manage | default(True)
+  tags: [firewall,rsync]
+
+- name: Create rsyncd.d directory
+  file: path=/etc/rsyncd.conf.d state=directory
+  tags: rsync
+
+- name: Deploy rsyncd conf
+  template: src=rsyncd.conf.j2 dest=/etc/rsyncd.conf
+  tags: rsync
+
+- name: Allow rsync full access in SELinux
+  seboolean: name=rsync_full_access state=True persistent=True
+  when: ansible_selinux.status == 'enabled'
+  tags: rsync
+
+- name: Start and enable rsync daemon
+  systemd: name=rsyncd.socket state=started enabled=True
+  tags: rsync

roles/rsync_server/templates/rsyncd.conf.j2

@@ -0,0 +1,4 @@
+transfer logging = yes
+dont compress   = *.gz *.tgz *.zip *.z *.Z *.rpm *.deb *.bz2
+
+&include /etc/rsyncd.conf.d

roles/rsync_server/vars/Debian-10.yml

@@ -0,0 +1,4 @@
+---
+
+rsync_packages:
+  - rsync

roles/rsync_server/vars/Debian-11.yml

@@ -0,0 +1,4 @@
+---
+
+rsync_packages:
+  - rsync

roles/rsync_server/vars/RedHat-7.yml

@@ -0,0 +1,5 @@
+---
+
+rsync_packages:
+  - rsync
+  - libsemanage-python

roles/rsync_server/vars/RedHat-8.yml

@@ -0,0 +1,6 @@
+---
+
+rsync_packages:
+  - rsync
+  - rsync-daemon
+  - python3-libsemanage