Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Also convert copr from lokkit to tcp_ports

Browse source
This commit is contained in:
Ralph Bean 2014-08-18 20:03:46 +00:00
parent 605cb0f0e2
commit 0fdbdda117
4 changed files with 2 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

1
inventory/host_vars/209.132.184.144
View file

@ -9,3 +9,4 @@ public_ip: 209.132.184.144
root_auth_users: bkabrda ryanlerch pingou msuchy sgallagh nb asamalik root_auth_users: bkabrda ryanlerch pingou msuchy sgallagh nb asamalik
description: copr frontend server description: copr frontend server
volumes: ['-d /dev/vdb vol-0000000f'] volumes: ['-d /dev/vdb vol-0000000f']
tcp_ports: [22, 80, 443]

2
inventory/host_vars/copr-fe-dev.cloud.fedoraproject.org
View file

@ -8,4 +8,4 @@ hostbase: copr-fe-dev-
public_ip: 209.132.184.183 public_ip: 209.132.184.183
root_auth_users: bkabrda ryanlerch pingou msuchy tradej asamalik root_auth_users: bkabrda ryanlerch pingou msuchy tradej asamalik
description: copr frontend server - dev instance description: copr frontend server - dev instance
tcp_ports: ['22', '80', '443'] tcp_ports: [22, 80, 443]

8
playbooks/hosts/copr-fe-dev.cloud.fedoraproject.org.yml
View file

@ -67,14 +67,6 @@
- name: copy pg_hba.conf - name: copy pg_hba.conf
action: copy src="{{ files }}/copr/fe/pg/pg_hba.conf" dest=/var/lib/pgsql/data/pg_hba.conf owner=postgres group=postgres mode=0600 action: copy src="{{ files }}/copr/fe/pg/pg_hba.conf" dest=/var/lib/pgsql/data/pg_hba.conf owner=postgres group=postgres mode=0600
# open up ports (22, 80, 443)
- name: poke holes in the firewall
action: command lokkit {{ item }}
with_items:
- --service=ssh
- --service=https
- --service=http
- name: copy httpd ssl certificates (crt) - name: copy httpd ssl certificates (crt)
action: copy src="{{ puppet_private }}/httpd/copr-fe.fedoraproject.org.crt" dest="/etc/pki/tls/certs/" owner=root group=root mode=0600 action: copy src="{{ puppet_private }}/httpd/copr-fe.fedoraproject.org.crt" dest="/etc/pki/tls/certs/" owner=root group=root mode=0600
tags: tags:

8
playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml
View file

@ -73,14 +73,6 @@
- name: copy pg_hba.conf - name: copy pg_hba.conf
action: copy src="{{ files }}/copr/fe/pg/pg_hba.conf" dest=/var/lib/pgsql/data/pg_hba.conf owner=postgres group=postgres mode=0600 action: copy src="{{ files }}/copr/fe/pg/pg_hba.conf" dest=/var/lib/pgsql/data/pg_hba.conf owner=postgres group=postgres mode=0600
# open up ports (22, 80, 443)
- name: poke holes in the firewall
action: command lokkit {{ item }}
with_items:
- --service=ssh
- --service=https
- --service=http
- name: copy httpd ssl certificates (crt) - name: copy httpd ssl certificates (crt)
action: copy src="{{ puppet_private }}/httpd/copr-fe.fedoraproject.org.crt" dest="/etc/pki/tls/certs/" owner=root group=root mode=0600 action: copy src="{{ puppet_private }}/httpd/copr-fe.fedoraproject.org.crt" dest="/etc/pki/tls/certs/" owner=root group=root mode=0600
tags: tags: