Newer
Older
---
- name: mirismanager install
apt:
force_apt_get: true
install_recommends: false
name: "{{ manager_packages }}"
- name: configure email sender address
notify: restart nginx
lineinfile:
path: /home/skyreach/skyreach_data/private/settings_override.py
regexp: '^#? ?DEFAULT_FROM_EMAIL.*'
line: "DEFAULT_FROM_EMAIL = '{{ manager_email_sender }}'"
backup: true
- name: configure domain name in nginx conf
notify: restart nginx
replace:
path: /etc/nginx/sites-available/skyreach.conf
regexp: '^(\s*server_name).*;$'
replace: '\1 {{ manager_hostname }};'
backup: true
- name: configure domain name in database
become: true
become_user: skyreach
environment:
PYTHONPATH: "/home/skyreach/skyreach_site:/home/skyreach:${PYTHONPATH}"
script:
cmd: files/set_site_url.py {{ manager_hostname }}
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
executable: python3
creates: /home/skyreach/.{{ manager_hostname }}.log
- name: resolve domain name to localhost ipv4
when: not in_docker
notify: restart nginx
lineinfile:
path: /etc/hosts
line: '127.0.1.1 {{ manager_hostname }}'
backup: true
- name: ensure skyreach is running
service:
name: skyreach
enabled: true
state: started
- name: check apt cacher ng config exists
register: manager_apt_cacher_conf
stat:
path: /etc/apt-cacher-ng/acng.conf
- name: configure apt-cacher-ng
when:
- manager_apt_cacher_conf.stat.exists
- manager_proxy_http | d(false)
notify: restart apt-cacher-ng
lineinfile:
path: /etc/apt-cacher-ng/acng.conf
regexp: '^Proxy: .*'
line: 'Proxy: {{ manager_proxy_http }}'
- name: ensure apt-cacher-ng is running
service:
name: apt-cacher-ng
enabled: true
state: started
# FAIL2BAN
- name: fail2ban
when: manager_fail2ban_enabled
vars:
f2b_filter: "{{ manager_f2b_filter }}"
f2b_jail: "{{ manager_f2b_jail }}"
include_role:
name: fail2ban
# FIREWALL
- name: firewall
when: manager_firewall_enabled
vars:
ferm_rules_filename: "{{ manager_ferm_rules_filename }}"
ferm_input_rules: "{{ manager_ferm_input_rules }}"
ferm_output_rules: "{{ manager_ferm_output_rules }}"
ferm_global_settings: "{{ manager_ferm_global_settings }}"
include_role:
Stéphane Diemer
committed
name: ferm-configure