ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template Signed-off-by: Ryan Lerch <rlerch@redhat.com>
This commit is contained in:
parent
3c41882bb0
commit
47c68f478d
149 changed files with 324 additions and 324 deletions
|
@ -111,7 +111,7 @@
|
||||||
- packages
|
- packages
|
||||||
|
|
||||||
# - name: easy access to the postgresql databases
|
# - name: easy access to the postgresql databases
|
||||||
# template: src=$files/mailman/pgpass.j2 dest=/root/.pgpass
|
# ansible.builtin.template: src=$files/mailman/pgpass.j2 dest=/root/.pgpass
|
||||||
# owner=root group=root mode=0600
|
# owner=root group=root mode=0600
|
||||||
|
|
||||||
- name: start services
|
- name: start services
|
||||||
|
|
|
@ -16,5 +16,5 @@
|
||||||
- virt: command=info
|
- virt: command=info
|
||||||
register: virt_info
|
register: virt_info
|
||||||
|
|
||||||
- template: src={{files}}/virthost-lists.j2 dest=/tmp/virthost-lists.out
|
- ansible.builtin.template: src={{files}}/virthost-lists.j2 dest=/tmp/virthost-lists.out
|
||||||
delegate_to: localhost
|
delegate_to: localhost
|
||||||
|
|
|
@ -8,7 +8,7 @@
|
||||||
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
||||||
tasks:
|
tasks:
|
||||||
- name: Copy the sql script to file
|
- name: Copy the sql script to file
|
||||||
template: src=fas-readonly.sql dest=/var/lib/pgsql/fas-readonly.sql
|
ansible.builtin.template: src=fas-readonly.sql dest=/var/lib/pgsql/fas-readonly.sql
|
||||||
|
|
||||||
- name: Change permissions for relevant tables in the fas db
|
- name: Change permissions for relevant tables in the fas db
|
||||||
ansible.builtin.shell: psql -1 -v ON_ERROR_STOP=1 fas2 </var/lib/pgsql/fas-readonly.sql
|
ansible.builtin.shell: psql -1 -v ON_ERROR_STOP=1 fas2 </var/lib/pgsql/fas-readonly.sql
|
||||||
|
|
|
@ -8,7 +8,7 @@
|
||||||
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
||||||
tasks:
|
tasks:
|
||||||
- name: Copy the sql script to file
|
- name: Copy the sql script to file
|
||||||
template: src=rollback.sql dest=/var/lib/pgsql/rollback.sql
|
ansible.builtin.template: src=rollback.sql dest=/var/lib/pgsql/rollback.sql
|
||||||
|
|
||||||
- name: Rollback permissions for relevant tables in the fas db
|
- name: Rollback permissions for relevant tables in the fas db
|
||||||
ansible.builtin.shell: psql -1 -v ON_ERROR_STOP=1 fas2 </var/lib/pgsql/rollback.sql
|
ansible.builtin.shell: psql -1 -v ON_ERROR_STOP=1 fas2 </var/lib/pgsql/rollback.sql
|
||||||
|
|
|
@ -28,7 +28,7 @@
|
||||||
state: directory
|
state: directory
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
- name: == OCP KVM provisioning == Importing generated Ignition files
|
- name: == OCP KVM provisioning == Importing generated Ignition files
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "/srv/web/infra/bigfiles/openshiftboot/{{ env }}/{{ item }}"
|
src: "/srv/web/infra/bigfiles/openshiftboot/{{ env }}/{{ item }}"
|
||||||
dest: "/var/www/html/rhcos/{{ item }}"
|
dest: "/var/www/html/rhcos/{{ item }}"
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
|
@ -37,7 +37,7 @@
|
||||||
- controlplane.ign
|
- controlplane.ign
|
||||||
- worker.ign
|
- worker.ign
|
||||||
- name: == OCP KVM provisioning == Creating treeinfo for virt-install --location
|
- name: == OCP KVM provisioning == Creating treeinfo for virt-install --location
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "/srv/web/infra/bigfiles/openshiftboot/ocp-treeinfo.j2"
|
src: "/srv/web/infra/bigfiles/openshiftboot/ocp-treeinfo.j2"
|
||||||
dest: "/var/www/html/rhcos/.treeinfo"
|
dest: "/var/www/html/rhcos/.treeinfo"
|
||||||
mode: "0644"
|
mode: "0644"
|
||||||
|
|
|
@ -19,7 +19,7 @@
|
||||||
|
|
||||||
pre_tasks:
|
pre_tasks:
|
||||||
- name: copy the koji.conf file with the correct variables
|
- name: copy the koji.conf file with the correct variables
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: koji.conf.j2
|
src: koji.conf.j2
|
||||||
dest: /etc/koji.conf
|
dest: /etc/koji.conf
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -60,7 +60,7 @@
|
||||||
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- template: src=templates/koji-reset-staging.sql dest=/var/lib/pgsql/koji-reset-staging.sql
|
- ansible.builtin.template: src=templates/koji-reset-staging.sql dest=/var/lib/pgsql/koji-reset-staging.sql
|
||||||
tags:
|
tags:
|
||||||
- db-sync-script
|
- db-sync-script
|
||||||
|
|
||||||
|
|
|
@ -34,7 +34,7 @@
|
||||||
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
# - template: src=templates/mailman-reset-staging.sql dest=/var/lib/pgsql/mailman-reset-staging.sql
|
# - ansible.builtin.template: src=templates/mailman-reset-staging.sql dest=/var/lib/pgsql/mailman-reset-staging.sql
|
||||||
- ansible.builtin.copy:
|
- ansible.builtin.copy:
|
||||||
src: /srv/web/infra/db-dumps/mailman.dump.xz
|
src: /srv/web/infra/db-dumps/mailman.dump.xz
|
||||||
dest: /var/tmp/mailman.dump.xz
|
dest: /var/tmp/mailman.dump.xz
|
||||||
|
@ -49,7 +49,7 @@
|
||||||
# - name: Fix the database
|
# - name: Fix the database
|
||||||
# ansible.builtin.shell: psql -f /var/lib/pgsql/mailman-reset-staging.sql mailman
|
# ansible.builtin.shell: psql -f /var/lib/pgsql/mailman-reset-staging.sql mailman
|
||||||
|
|
||||||
# - template: src=templates/hyperkitty-reset-staging.sql dest=/var/lib/pgsql/hyperkitty-reset-staging.sql
|
# - ansible.builtin.template: src=templates/hyperkitty-reset-staging.sql dest=/var/lib/pgsql/hyperkitty-reset-staging.sql
|
||||||
- ansible.builtin.copy:
|
- ansible.builtin.copy:
|
||||||
src: /srv/web/infra/db-dumps/hyperkitty.dump.xz
|
src: /srv/web/infra/db-dumps/hyperkitty.dump.xz
|
||||||
dest: /var/tmp/hyperkitty.dump.xz
|
dest: /var/tmp/hyperkitty.dump.xz
|
||||||
|
|
|
@ -22,7 +22,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Install retrace ssl vhost
|
- name: Install retrace ssl vhost
|
||||||
template: src="httpd/retrace_ssl.conf.j2" dest="/etc/httpd/conf.d/retrace_ssl.conf"
|
ansible.builtin.template: src="httpd/retrace_ssl.conf.j2" dest="/etc/httpd/conf.d/retrace_ssl.conf"
|
||||||
when: letsencrypt is defined
|
when: letsencrypt is defined
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: Provide /etc/faf/faf.conf
|
- name: Provide /etc/faf/faf.conf
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: etc-faf-faf.conf.j2
|
src: etc-faf-faf.conf.j2
|
||||||
dest: /etc/faf/faf.conf
|
dest: /etc/faf/faf.conf
|
||||||
|
|
||||||
|
@ -16,7 +16,7 @@
|
||||||
when: faf_with_fedmsg|bool
|
when: faf_with_fedmsg|bool
|
||||||
|
|
||||||
- name: Provide configuration for fedora-messaging
|
- name: Provide configuration for fedora-messaging
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: etc-fedora-messaging-config.toml.j2
|
src: etc-fedora-messaging-config.toml.j2
|
||||||
dest: /etc/fedora-messaging/config.toml
|
dest: /etc/fedora-messaging/config.toml
|
||||||
when: faf_with_fedmsg|bool
|
when: faf_with_fedmsg|bool
|
||||||
|
|
|
@ -25,14 +25,14 @@
|
||||||
when: faf_with_symboltransfer|bool
|
when: faf_with_symboltransfer|bool
|
||||||
|
|
||||||
- name: Provide /etc/faf/plugins/web.conf
|
- name: Provide /etc/faf/plugins/web.conf
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: etc-faf-plugins-web.conf.j2
|
src: etc-faf-plugins-web.conf.j2
|
||||||
dest: /etc/faf/plugins/web.conf
|
dest: /etc/faf/plugins/web.conf
|
||||||
notify:
|
notify:
|
||||||
- restart httpd
|
- restart httpd
|
||||||
|
|
||||||
- name: Put webfaf on root (/) if configured
|
- name: Put webfaf on root (/) if configured
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: etc-httpd-conf.d-faf-web.conf.j2
|
src: etc-httpd-conf.d-faf-web.conf.j2
|
||||||
dest: /etc/httpd/conf.d/faf-web.conf
|
dest: /etc/httpd/conf.d/faf-web.conf
|
||||||
notify:
|
notify:
|
||||||
|
|
|
@ -1,20 +1,20 @@
|
||||||
---
|
---
|
||||||
- name: Configure retrace-server
|
- name: Configure retrace-server
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: etc-retrace-server.conf.j2
|
src: etc-retrace-server.conf.j2
|
||||||
dest: /etc/retrace-server/retrace-server.conf
|
dest: /etc/retrace-server/retrace-server.conf
|
||||||
mode: "0644"
|
mode: "0644"
|
||||||
notify: restart httpd
|
notify: restart httpd
|
||||||
|
|
||||||
- name: Retrace-server http config
|
- name: Retrace-server http config
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: retrace-server-httpd.conf.j2
|
src: retrace-server-httpd.conf.j2
|
||||||
dest: /etc/httpd/conf.d/retrace-server-httpd.conf
|
dest: /etc/httpd/conf.d/retrace-server-httpd.conf
|
||||||
mode: "0644"
|
mode: "0644"
|
||||||
notify: restart httpd
|
notify: restart httpd
|
||||||
|
|
||||||
- name: Configure retrace-server hooks config
|
- name: Configure retrace-server hooks config
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: etc-retrace-server-hooks.conf.j2
|
src: etc-retrace-server-hooks.conf.j2
|
||||||
dest: /etc/retrace-server/retrace-server-hooks.conf
|
dest: /etc/retrace-server/retrace-server-hooks.conf
|
||||||
mode: "0644"
|
mode: "0644"
|
||||||
|
|
|
@ -20,7 +20,7 @@
|
||||||
- ansible-server
|
- ansible-server
|
||||||
|
|
||||||
- name: Generate default ansible config
|
- name: Generate default ansible config
|
||||||
template: src=ansible.cfg.j2 dest=/etc/ansible/ansible.cfg owner=root group=root mode=0644
|
ansible.builtin.template: src=ansible.cfg.j2 dest=/etc/ansible/ansible.cfg owner=root group=root mode=0644
|
||||||
tags:
|
tags:
|
||||||
- ansible-server
|
- ansible-server
|
||||||
|
|
||||||
|
|
|
@ -55,7 +55,7 @@
|
||||||
- apache
|
- apache
|
||||||
|
|
||||||
- name: Add appserver headers.conf
|
- name: Add appserver headers.conf
|
||||||
template: src="{{ files }}/httpd/headers.conf.j2" dest=/etc/httpd/conf.d/headers.conf
|
ansible.builtin.template: src="{{ files }}/httpd/headers.conf.j2" dest=/etc/httpd/conf.d/headers.conf
|
||||||
notify:
|
notify:
|
||||||
- reload apache
|
- reload apache
|
||||||
tags:
|
tags:
|
||||||
|
@ -64,7 +64,7 @@
|
||||||
- apache/headers
|
- apache/headers
|
||||||
|
|
||||||
- name: Add appserver h2.conf
|
- name: Add appserver h2.conf
|
||||||
template: src="{{ files }}/httpd/h2.conf.j2" dest=/etc/httpd/conf.d/h2.conf
|
ansible.builtin.template: src="{{ files }}/httpd/h2.conf.j2" dest=/etc/httpd/conf.d/h2.conf
|
||||||
when: ansible_distribution == 'Fedora'
|
when: ansible_distribution == 'Fedora'
|
||||||
notify:
|
notify:
|
||||||
- reload apache
|
- reload apache
|
||||||
|
@ -74,7 +74,7 @@
|
||||||
- h2
|
- h2
|
||||||
|
|
||||||
- name: Add apache_status location for collectd
|
- name: Add apache_status location for collectd
|
||||||
template: src="{{ files }}/httpd/apachestatus.conf" dest=/etc/httpd/conf.d/apachestatus.conf
|
ansible.builtin.template: src="{{ files }}/httpd/apachestatus.conf" dest=/etc/httpd/conf.d/apachestatus.conf
|
||||||
notify:
|
notify:
|
||||||
- reload apache
|
- reload apache
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -184,7 +184,7 @@
|
||||||
- blocklist
|
- blocklist
|
||||||
|
|
||||||
- name: Iptables
|
- name: Iptables
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ item }}"
|
src: "{{ item }}"
|
||||||
dest: /etc/sysconfig/iptables
|
dest: /etc/sysconfig/iptables
|
||||||
mode: '0600'
|
mode: '0600'
|
||||||
|
@ -213,7 +213,7 @@
|
||||||
when: baseiptables|bool
|
when: baseiptables|bool
|
||||||
|
|
||||||
- name: Ip6tables
|
- name: Ip6tables
|
||||||
template: src={{ item }} dest=/etc/sysconfig/ip6tables mode=0600 backup=yes
|
ansible.builtin.template: src={{ item }} dest=/etc/sysconfig/ip6tables mode=0600 backup=yes
|
||||||
with_first_found:
|
with_first_found:
|
||||||
- iptables/ip6tables.{{ datacenter }}
|
- iptables/ip6tables.{{ datacenter }}
|
||||||
- iptables/ip6tables.{{ inventory_hostname }}
|
- iptables/ip6tables.{{ inventory_hostname }}
|
||||||
|
@ -422,7 +422,7 @@
|
||||||
- common-scripts
|
- common-scripts
|
||||||
|
|
||||||
- name: Drop in a little system_identification note
|
- name: Drop in a little system_identification note
|
||||||
template: src=system_identification dest=/etc/system_identification
|
ansible.builtin.template: src=system_identification dest=/etc/system_identification
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- base
|
- base
|
||||||
|
@ -481,7 +481,7 @@
|
||||||
|
|
||||||
# Set krb5 conf
|
# Set krb5 conf
|
||||||
- name: Configure krb5
|
- name: Configure krb5
|
||||||
template: src=krb5.conf.j2 dest=/etc/krb5.conf owner=root group=root mode=0644
|
ansible.builtin.template: src=krb5.conf.j2 dest=/etc/krb5.conf owner=root group=root mode=0644
|
||||||
when: not inventory_hostname.startswith('ipa')
|
when: not inventory_hostname.startswith('ipa')
|
||||||
tags:
|
tags:
|
||||||
- base
|
- base
|
||||||
|
@ -489,7 +489,7 @@
|
||||||
- krb5
|
- krb5
|
||||||
|
|
||||||
- name: Configure krb5 (IPA master)
|
- name: Configure krb5 (IPA master)
|
||||||
template: src=krb5.conf.master.j2 dest=/etc/krb5.conf owner=root group=root mode=0644
|
ansible.builtin.template: src=krb5.conf.master.j2 dest=/etc/krb5.conf owner=root group=root mode=0644
|
||||||
when: inventory_hostname.startswith('ipa')
|
when: inventory_hostname.startswith('ipa')
|
||||||
tags:
|
tags:
|
||||||
- base
|
- base
|
||||||
|
|
|
@ -72,7 +72,7 @@
|
||||||
- base
|
- base
|
||||||
|
|
||||||
- name: Sshd_config
|
- name: Sshd_config
|
||||||
template: src=sshd_config dest=/etc/ssh/sshd_config mode=0600
|
ansible.builtin.template: src=sshd_config dest=/etc/ssh/sshd_config mode=0600
|
||||||
notify:
|
notify:
|
||||||
- restart sshd
|
- restart sshd
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -122,7 +122,7 @@
|
||||||
#
|
#
|
||||||
|
|
||||||
- name: Install the fedora-messaging configuration file
|
- name: Install the fedora-messaging configuration file
|
||||||
template: src=batcave-messaging.toml dest=/etc/fedora-messaging/batcave-messaging.toml
|
ansible.builtin.template: src=batcave-messaging.toml dest=/etc/fedora-messaging/batcave-messaging.toml
|
||||||
tags:
|
tags:
|
||||||
- batcave
|
- batcave
|
||||||
- config
|
- config
|
||||||
|
@ -358,7 +358,7 @@
|
||||||
- httpd
|
- httpd
|
||||||
|
|
||||||
- name: Install web server config for batcave (main config)
|
- name: Install web server config for batcave (main config)
|
||||||
template: src=infrastructure.fedoraproject.org.conf.j2 dest=/etc/httpd/conf.d/infrastructure.fedoraproject.org.conf mode=0644
|
ansible.builtin.template: src=infrastructure.fedoraproject.org.conf.j2 dest=/etc/httpd/conf.d/infrastructure.fedoraproject.org.conf mode=0644
|
||||||
notify:
|
notify:
|
||||||
- reload httpd
|
- reload httpd
|
||||||
tags:
|
tags:
|
||||||
|
@ -402,7 +402,7 @@
|
||||||
#
|
#
|
||||||
|
|
||||||
- name: Install geoip download databases script
|
- name: Install geoip download databases script
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: geoip-download-databases
|
src: geoip-download-databases
|
||||||
dest: /usr/local/bin/geoip-download-databases
|
dest: /usr/local/bin/geoip-download-databases
|
||||||
mode: "0700"
|
mode: "0700"
|
||||||
|
|
|
@ -60,7 +60,7 @@
|
||||||
- bkernel
|
- bkernel
|
||||||
|
|
||||||
- name: Mock site-defaults.cfg
|
- name: Mock site-defaults.cfg
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: bkernel-site-defaults.cfg
|
src: bkernel-site-defaults.cfg
|
||||||
dest: /etc/mock/site-defaults.cfg
|
dest: /etc/mock/site-defaults.cfg
|
||||||
mode: "0644"
|
mode: "0644"
|
||||||
|
|
|
@ -39,7 +39,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Setup blockerbugs app settings file
|
- name: Setup blockerbugs app settings file
|
||||||
template: src=blockerbugs-settings.py.j2 dest=/etc/blockerbugs/settings.py mode=640
|
ansible.builtin.template: src=blockerbugs-settings.py.j2 dest=/etc/blockerbugs/settings.py mode=640
|
||||||
notify:
|
notify:
|
||||||
- reload httpd
|
- reload httpd
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -60,7 +60,7 @@
|
||||||
- bodhi
|
- bodhi
|
||||||
|
|
||||||
- name: Put pungi configurations in place
|
- name: Put pungi configurations in place
|
||||||
template: src="{{item}}" dest=/etc/bodhi/{{item}}
|
ansible.builtin.template: src="{{item}}" dest=/etc/bodhi/{{item}}
|
||||||
with_items:
|
with_items:
|
||||||
- pungi.module.conf.j2
|
- pungi.module.conf.j2
|
||||||
- pungi.rpm.conf.j2
|
- pungi.rpm.conf.j2
|
||||||
|
@ -105,7 +105,7 @@
|
||||||
# cron job that syncs packages to koji
|
# cron job that syncs packages to koji
|
||||||
#
|
#
|
||||||
- name: Put owner-sync-pagure in place
|
- name: Put owner-sync-pagure in place
|
||||||
template: src=owner-sync-pagure.j2 dest=/usr/local/bin/owner-sync-pagure mode="0755"
|
ansible.builtin.template: src=owner-sync-pagure.j2 dest=/usr/local/bin/owner-sync-pagure mode="0755"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- bodhi
|
- bodhi
|
||||||
|
@ -148,7 +148,7 @@
|
||||||
- koji-sync
|
- koji-sync
|
||||||
|
|
||||||
- name: Put the koji sync listener config file in place
|
- name: Put the koji sync listener config file in place
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: koji_sync_listener.toml
|
src: koji_sync_listener.toml
|
||||||
dest: /etc/fedora-messaging/koji_sync_listener.toml
|
dest: /etc/fedora-messaging/koji_sync_listener.toml
|
||||||
when: env == "production"
|
when: env == "production"
|
||||||
|
@ -286,8 +286,8 @@
|
||||||
- cron
|
- cron
|
||||||
|
|
||||||
- name: Install logging.yaml
|
- name: Install logging.yaml
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src="{{ roles_path }}/bodhi2/base/templates/logging.yaml.j2"
|
src="{{ roles_path }}/bodhi2/base/templates/logging.yaml"
|
||||||
dest="/etc/bodhi/logging.yaml"
|
dest="/etc/bodhi/logging.yaml"
|
||||||
owner=apache
|
owner=apache
|
||||||
group=apache
|
group=apache
|
||||||
|
@ -297,7 +297,7 @@
|
||||||
- bodhi
|
- bodhi
|
||||||
|
|
||||||
- name: Install production.ini
|
- name: Install production.ini
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ roles_path }}/bodhi2/base/templates/production.ini.j2"
|
src: "{{ roles_path }}/bodhi2/base/templates/production.ini.j2"
|
||||||
dest: /etc/bodhi/production.ini
|
dest: /etc/bodhi/production.ini
|
||||||
owner: apache
|
owner: apache
|
||||||
|
@ -308,7 +308,7 @@
|
||||||
- bodhi
|
- bodhi
|
||||||
|
|
||||||
- name: Install celeryconfig.py
|
- name: Install celeryconfig.py
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ roles_path }}/bodhi2/base/templates/celeryconfig.py.j2"
|
src: "{{ roles_path }}/bodhi2/base/templates/celeryconfig.py.j2"
|
||||||
dest: /etc/bodhi/celeryconfig.py
|
dest: /etc/bodhi/celeryconfig.py
|
||||||
owner: apache
|
owner: apache
|
||||||
|
@ -319,7 +319,7 @@
|
||||||
- bodhi
|
- bodhi
|
||||||
|
|
||||||
- name: Install fedora-messaging config
|
- name: Install fedora-messaging config
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ roles_path }}/bodhi2/base/templates/fedora-messaging.toml.j2"
|
src: "{{ roles_path }}/bodhi2/base/templates/fedora-messaging.toml.j2"
|
||||||
dest: /etc/fedora-messaging/config.toml
|
dest: /etc/fedora-messaging/config.toml
|
||||||
owner: apache
|
owner: apache
|
||||||
|
@ -440,6 +440,6 @@
|
||||||
- bodhi
|
- bodhi
|
||||||
|
|
||||||
- name: Set up koji profile
|
- name: Set up koji profile
|
||||||
template: src=kojiprofile.conf dest=/etc/koji.conf.d/bodhi.conf
|
ansible.builtin.template: src=kojiprofile.conf dest=/etc/koji.conf.d/bodhi.conf
|
||||||
tags:
|
tags:
|
||||||
- bodhi
|
- bodhi
|
||||||
|
|
|
@ -25,7 +25,7 @@
|
||||||
state: present
|
state: present
|
||||||
|
|
||||||
- name: Configure alembic
|
- name: Configure alembic
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: alembic.ini
|
src: alembic.ini
|
||||||
dest: /etc/bodhi/alembic.ini
|
dest: /etc/bodhi/alembic.ini
|
||||||
owner: bodhi
|
owner: bodhi
|
||||||
|
|
|
@ -16,7 +16,7 @@
|
||||||
|
|
||||||
|
|
||||||
- name: Configure btrfs-balance timer
|
- name: Configure btrfs-balance timer
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: schedule.conf.j2
|
src: schedule.conf.j2
|
||||||
dest: /etc/systemd/system/btrfs-balance.timer.d/schedule.conf
|
dest: /etc/systemd/system/btrfs-balance.timer.d/schedule.conf
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -35,7 +35,7 @@
|
||||||
- bugzilla2fedmsg
|
- bugzilla2fedmsg
|
||||||
|
|
||||||
- name: Copy the configuration for bugzilla2fedmsg over
|
- name: Copy the configuration for bugzilla2fedmsg over
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=bugzilla2fedmsg.ini
|
src=bugzilla2fedmsg.ini
|
||||||
dest=/etc/moksha/production.ini
|
dest=/etc/moksha/production.ini
|
||||||
owner=fedmsg
|
owner=fedmsg
|
||||||
|
|
|
@ -177,14 +177,14 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Configure fedora-messaging check-compose consumer
|
- name: Configure fedora-messaging check-compose consumer
|
||||||
template: src=check-compose.toml.j2 dest=/etc/fedora-messaging/check-compose.toml owner=root group=root mode=0640
|
ansible.builtin.template: src=check-compose.toml.j2 dest=/etc/fedora-messaging/check-compose.toml owner=root group=root mode=0640
|
||||||
notify:
|
notify:
|
||||||
- restart check-compose
|
- restart check-compose
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Install config file
|
- name: Install config file
|
||||||
template: src=check-compose.conf.j2 dest=/etc/check-compose.conf mode=0644
|
ansible.builtin.template: src=check-compose.conf.j2 dest=/etc/check-compose.conf mode=0644
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
||||||
|
|
|
@ -7,7 +7,7 @@
|
||||||
- base
|
- base
|
||||||
|
|
||||||
- name: Install chrony.conf
|
- name: Install chrony.conf
|
||||||
template: src=chrony.conf.j2 dest=/etc/chrony.conf
|
ansible.builtin.template: src=chrony.conf.j2 dest=/etc/chrony.conf
|
||||||
notify:
|
notify:
|
||||||
- restart chronyd
|
- restart chronyd
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -31,7 +31,7 @@
|
||||||
ansible.builtin.copy: src=freshclam-cron dest=/etc/cron.daily/freshclam
|
ansible.builtin.copy: src=freshclam-cron dest=/etc/cron.daily/freshclam
|
||||||
|
|
||||||
- name: Setup the periodic clam scan script
|
- name: Setup the periodic clam scan script
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=clamscan.sh.j2
|
src=clamscan.sh.j2
|
||||||
dest=/usr/local/bin/clamscan.sh
|
dest=/usr/local/bin/clamscan.sh
|
||||||
mode=0755
|
mode=0755
|
||||||
|
|
|
@ -38,7 +38,7 @@
|
||||||
|
|
||||||
# install collected.conf
|
# install collected.conf
|
||||||
- name: /etc/collectd.conf
|
- name: /etc/collectd.conf
|
||||||
template: src=collectd.conf.j2 dest=/etc/collectd.conf
|
ansible.builtin.template: src=collectd.conf.j2 dest=/etc/collectd.conf
|
||||||
tags:
|
tags:
|
||||||
- collectd
|
- collectd
|
||||||
notify:
|
notify:
|
||||||
|
@ -46,7 +46,7 @@
|
||||||
|
|
||||||
# install collectd-network config
|
# install collectd-network config
|
||||||
- name: /etc/collectd.d/network.conf
|
- name: /etc/collectd.d/network.conf
|
||||||
template: src=network-client.conf.j2 dest=/etc/collectd.d/network.conf
|
ansible.builtin.template: src=network-client.conf.j2 dest=/etc/collectd.d/network.conf
|
||||||
tags:
|
tags:
|
||||||
- collectd
|
- collectd
|
||||||
notify:
|
notify:
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: Copy in /usr/local/bin/fedmsg-service-collectd
|
- name: Copy in /usr/local/bin/fedmsg-service-collectd
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=fedmsg-service-collectd.py
|
src=fedmsg-service-collectd.py
|
||||||
dest="/usr/local/bin/fedmsg-service-collectd-{{ process }}"
|
dest="/usr/local/bin/fedmsg-service-collectd-{{ process }}"
|
||||||
mode=0755
|
mode=0755
|
||||||
|
@ -11,7 +11,7 @@
|
||||||
notify: restart collectd
|
notify: restart collectd
|
||||||
|
|
||||||
- name: Copy in /etc/collectd.d/fedmsg-service.conf
|
- name: Copy in /etc/collectd.d/fedmsg-service.conf
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=fedmsg-service.conf
|
src=fedmsg-service.conf
|
||||||
dest=/etc/collectd.d/{{ process }}.conf
|
dest=/etc/collectd.d/{{ process }}.conf
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: Copy in /usr/local/bin/collectd-postgres.sh
|
- name: Copy in /usr/local/bin/collectd-postgres.sh
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=collectd-postgres.sh
|
src=collectd-postgres.sh
|
||||||
dest=/usr/local/bin/collectd-postgres.sh
|
dest=/usr/local/bin/collectd-postgres.sh
|
||||||
mode=0755
|
mode=0755
|
||||||
|
@ -10,7 +10,7 @@
|
||||||
notify: restart collectd
|
notify: restart collectd
|
||||||
|
|
||||||
- name: Copy in /etc/collectd.d/postgres.conf
|
- name: Copy in /etc/collectd.d/postgres.conf
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=postgres.conf
|
src=postgres.conf
|
||||||
dest=/etc/collectd.d/postgres.conf
|
dest=/etc/collectd.d/postgres.conf
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -16,7 +16,7 @@
|
||||||
- collectd
|
- collectd
|
||||||
|
|
||||||
- name: Install collectd rabbitmq config
|
- name: Install collectd rabbitmq config
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "rabbitmq.collectd.conf.j2"
|
src: "rabbitmq.collectd.conf.j2"
|
||||||
dest: "/etc/collectd.d/rabbitmq.conf"
|
dest: "/etc/collectd.d/rabbitmq.conf"
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: Copy in /usr/local/bin/web-service-collectd
|
- name: Copy in /usr/local/bin/web-service-collectd
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=web-service-collectd.py
|
src=web-service-collectd.py
|
||||||
dest="/usr/local/bin/web-service-collectd-{{ site }}"
|
dest="/usr/local/bin/web-service-collectd-{{ site }}"
|
||||||
mode=0755
|
mode=0755
|
||||||
|
@ -10,7 +10,7 @@
|
||||||
notify: restart collectd
|
notify: restart collectd
|
||||||
|
|
||||||
- name: Copy in /etc/collectd.d/web-service.conf
|
- name: Copy in /etc/collectd.d/web-service.conf
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=web-service.conf
|
src=web-service.conf
|
||||||
dest=/etc/collectd.d/{{ site }}.conf
|
dest=/etc/collectd.d/{{ site }}.conf
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- {user: resalloc, homedir: /var/lib/resallocserver}
|
- {user: resalloc, homedir: /var/lib/resallocserver}
|
||||||
|
|
||||||
- name: Install aws credentials file
|
- name: Install aws credentials file
|
||||||
template: src=aws-credentials
|
ansible.builtin.template: src=aws-credentials
|
||||||
dest="{{ item.homedir }}/.aws/credentials"
|
dest="{{ item.homedir }}/.aws/credentials"
|
||||||
owner={{ item.user }}
|
owner={{ item.user }}
|
||||||
group={{ item.user }}
|
group={{ item.user }}
|
||||||
|
@ -23,7 +23,7 @@
|
||||||
- {user: resalloc, homedir: /var/lib/resallocserver}
|
- {user: resalloc, homedir: /var/lib/resallocserver}
|
||||||
|
|
||||||
- name: Install aws config file
|
- name: Install aws config file
|
||||||
template: src=aws-config
|
ansible.builtin.template: src=aws-config
|
||||||
dest="{{ item.homedir }}/.aws/config"
|
dest="{{ item.homedir }}/.aws/config"
|
||||||
owner={{ item.user }}
|
owner={{ item.user }}
|
||||||
group={{ item.user }}
|
group={{ item.user }}
|
||||||
|
|
|
@ -30,7 +30,7 @@
|
||||||
tags: copr_ping
|
tags: copr_ping
|
||||||
|
|
||||||
- name: Install the ping script
|
- name: Install the ping script
|
||||||
template:
|
ansible.builtin.template:
|
||||||
dest: "{{ ping_homedir }}/{{ ping_script }}"
|
dest: "{{ ping_homedir }}/{{ ping_script }}"
|
||||||
src: "{{ ping_script }}.j2"
|
src: "{{ ping_script }}.j2"
|
||||||
owner: "{{ ping_user }}"
|
owner: "{{ ping_user }}"
|
||||||
|
@ -39,7 +39,7 @@
|
||||||
tags: copr_ping
|
tags: copr_ping
|
||||||
|
|
||||||
- name: Install the check script
|
- name: Install the check script
|
||||||
template:
|
ansible.builtin.template:
|
||||||
dest: "/usr/bin/copr-ping-check.py"
|
dest: "/usr/bin/copr-ping-check.py"
|
||||||
src: "copr-ping-check.py.j2"
|
src: "copr-ping-check.py.j2"
|
||||||
owner: "{{ ping_user }}"
|
owner: "{{ ping_user }}"
|
||||||
|
|
|
@ -59,7 +59,7 @@
|
||||||
ansible.builtin.copy: src="{{ private }}/files/copr/buildsys.priv" dest=/home/copr/.ssh/id_rsa owner=copr group=copr mode=600
|
ansible.builtin.copy: src="{{ private }}/files/copr/buildsys.priv" dest=/home/copr/.ssh/id_rsa owner=copr group=copr mode=600
|
||||||
|
|
||||||
- name: Setup copr user ssh config file
|
- name: Setup copr user ssh config file
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "ssh_config.j2"
|
src: "ssh_config.j2"
|
||||||
dest: /home/copr/.ssh/config
|
dest: /home/copr/.ssh/config
|
||||||
owner: copr
|
owner: copr
|
||||||
|
@ -94,7 +94,7 @@
|
||||||
|
|
||||||
# setup webserver
|
# setup webserver
|
||||||
- name: Install lighttpd.conf
|
- name: Install lighttpd.conf
|
||||||
template: src="lighttpd/lighttpd.conf" dest=/etc/lighttpd/lighttpd.conf owner=root group=root mode=0644
|
ansible.builtin.template: src="lighttpd/lighttpd.conf" dest=/etc/lighttpd/lighttpd.conf owner=root group=root mode=0644
|
||||||
notify:
|
notify:
|
||||||
- restart lighttpd
|
- restart lighttpd
|
||||||
tags:
|
tags:
|
||||||
|
@ -102,7 +102,7 @@
|
||||||
- lighttpd_config
|
- lighttpd_config
|
||||||
|
|
||||||
- name: Add gzip content-encoding header by lua script
|
- name: Add gzip content-encoding header by lua script
|
||||||
template: src="lighttpd/content-encoding-gzip-if-exists.lua" dest=/etc/lighttpd/content-encoding-gzip-if-exists.lua owner=root group=root mode=0644
|
ansible.builtin.template: src="lighttpd/content-encoding-gzip-if-exists.lua" dest=/etc/lighttpd/content-encoding-gzip-if-exists.lua owner=root group=root mode=0644
|
||||||
notify:
|
notify:
|
||||||
- restart lighttpd
|
- restart lighttpd
|
||||||
tags:
|
tags:
|
||||||
|
@ -132,7 +132,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Install custom lighttpd template for directory listings
|
- name: Install custom lighttpd template for directory listings
|
||||||
template: src="lighttpd/dir-generator.php.j2" dest="/var/lib/copr/public_html/dir-generator.php" owner=copr group=copr mode=0755
|
ansible.builtin.template: src="lighttpd/dir-generator.php.j2" dest="/var/lib/copr/public_html/dir-generator.php" owner=copr group=copr mode=0755
|
||||||
|
|
||||||
- name: Install resalloc CGI script
|
- name: Install resalloc CGI script
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
|
@ -160,7 +160,7 @@
|
||||||
tags: logrotate
|
tags: logrotate
|
||||||
|
|
||||||
- name: Install custom logrotate config for lighttpd
|
- name: Install custom logrotate config for lighttpd
|
||||||
template: src="logrotate/lighttpd.j2" dest=/etc/logrotate.d/lighttpd owner=root group=root mode=644
|
ansible.builtin.template: src="logrotate/lighttpd.j2" dest=/etc/logrotate.d/lighttpd owner=root group=root mode=644
|
||||||
tags: logrotate
|
tags: logrotate
|
||||||
|
|
||||||
- name: Start webserver
|
- name: Start webserver
|
||||||
|
@ -239,7 +239,7 @@
|
||||||
when: devel|bool
|
when: devel|bool
|
||||||
|
|
||||||
- name: Copy copr-be.conf
|
- name: Copy copr-be.conf
|
||||||
template: src="copr-be.conf.j2" dest=/etc/copr/copr-be.conf owner=root group=copr mode=640
|
ansible.builtin.template: src="copr-be.conf.j2" dest=/etc/copr/copr-be.conf owner=root group=copr mode=640
|
||||||
notify:
|
notify:
|
||||||
- restart copr-backend
|
- restart copr-backend
|
||||||
tags:
|
tags:
|
||||||
|
@ -254,7 +254,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Install messaging config
|
- name: Install messaging config
|
||||||
template: src="fedora-messaging.conf.j2"
|
ansible.builtin.template: src="fedora-messaging.conf.j2"
|
||||||
dest=/etc/copr/msgbuses/fedora-messaging.conf
|
dest=/etc/copr/msgbuses/fedora-messaging.conf
|
||||||
owner=copr group=copr mode=0600
|
owner=copr group=copr mode=0600
|
||||||
when: copr_messaging
|
when: copr_messaging
|
||||||
|
@ -264,7 +264,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Copy sign.conf
|
- name: Copy sign.conf
|
||||||
template: src=sign.conf dest=/etc/sign.conf owner=root group=copr mode=640
|
ansible.builtin.template: src=sign.conf dest=/etc/sign.conf owner=root group=copr mode=640
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
||||||
|
@ -313,7 +313,7 @@
|
||||||
- clean_rh_subscriptions
|
- clean_rh_subscriptions
|
||||||
|
|
||||||
- name: Install cleanup-unused-vms script
|
- name: Install cleanup-unused-vms script
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ item }}"
|
src: "{{ item }}"
|
||||||
dest: /usr/local/bin/{{ item }}
|
dest: /usr/local/bin/{{ item }}
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
|
|
|
@ -25,7 +25,7 @@
|
||||||
when: env == "production"
|
when: env == "production"
|
||||||
|
|
||||||
- name: Install Pulp config file
|
- name: Install Pulp config file
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: pulp-cli.toml
|
src: pulp-cli.toml
|
||||||
dest: "/home/copr/.config/pulp/cli.toml"
|
dest: "/home/copr/.config/pulp/cli.toml"
|
||||||
owner: copr
|
owner: copr
|
||||||
|
|
|
@ -119,7 +119,7 @@
|
||||||
- provision_config
|
- provision_config
|
||||||
|
|
||||||
- name: Resalloc, scripts
|
- name: Resalloc, scripts
|
||||||
template: src="resalloc/{{ item }}.j2" dest="/var/lib/resallocserver/resalloc_provision/{{ item }}"
|
ansible.builtin.template: src="resalloc/{{ item }}.j2" dest="/var/lib/resallocserver/resalloc_provision/{{ item }}"
|
||||||
mode=755
|
mode=755
|
||||||
with_items:
|
with_items:
|
||||||
- vm-delete
|
- vm-delete
|
||||||
|
@ -147,7 +147,7 @@
|
||||||
mode: "0600"
|
mode: "0600"
|
||||||
|
|
||||||
- name: Resalloc, ssh config file
|
- name: Resalloc, ssh config file
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "ssh_config.j2"
|
src: "ssh_config.j2"
|
||||||
dest: /var/lib/resallocserver/.ssh/config
|
dest: /var/lib/resallocserver/.ssh/config
|
||||||
owner: resalloc
|
owner: resalloc
|
||||||
|
@ -158,7 +158,7 @@
|
||||||
- provision_config
|
- provision_config
|
||||||
|
|
||||||
- name: Resalloc, server config
|
- name: Resalloc, server config
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "resalloc/{{ item }}"
|
src: "resalloc/{{ item }}"
|
||||||
dest: "/etc/resallocserver/{{ item }}"
|
dest: "/etc/resallocserver/{{ item }}"
|
||||||
mode: "0640"
|
mode: "0640"
|
||||||
|
@ -179,7 +179,7 @@
|
||||||
when: not services_disabled|bool
|
when: not services_disabled|bool
|
||||||
|
|
||||||
- name: Shortcuts around resalloc-aws-start
|
- name: Shortcuts around resalloc-aws-start
|
||||||
template: src="{{ roles_path }}/copr/backend/templates/provision/copr-resalloc-aws-new.j2"
|
ansible.builtin.template: src="{{ roles_path }}/copr/backend/templates/provision/copr-resalloc-aws-new.j2"
|
||||||
dest="/usr/local/bin/copr-resalloc-aws-new-{{ item }}"
|
dest="/usr/local/bin/copr-resalloc-aws-new-{{ item }}"
|
||||||
mode=0755
|
mode=0755
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -23,7 +23,7 @@
|
||||||
- provision_config
|
- provision_config
|
||||||
|
|
||||||
- name: Resalloc, generate vars.yml file
|
- name: Resalloc, generate vars.yml file
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ roles_path }}/copr/backend/templates/provision/{{ item }}"
|
src: "{{ roles_path }}/copr/backend/templates/provision/{{ item }}"
|
||||||
dest: "{{ provision_directory }}/{{ item }}"
|
dest: "{{ provision_directory }}/{{ item }}"
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -32,7 +32,7 @@
|
||||||
- provision_config
|
- provision_config
|
||||||
|
|
||||||
- name: Templated provision scripts
|
- name: Templated provision scripts
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ roles_path }}/copr/backend/templates/provision/{{ item }}"
|
src: "{{ roles_path }}/copr/backend/templates/provision/{{ item }}"
|
||||||
dest: "{{ provision_directory }}/{{ item }}"
|
dest: "{{ provision_directory }}/{{ item }}"
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
|
@ -45,7 +45,7 @@
|
||||||
- cloud_vars is not defined
|
- cloud_vars is not defined
|
||||||
|
|
||||||
- name: Templated provision scripts
|
- name: Templated provision scripts
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ roles_path }}/copr/backend/templates/provision/{{ item }}"
|
src: "{{ roles_path }}/copr/backend/templates/provision/{{ item }}"
|
||||||
dest: "{{ provision_directory }}/{{ item }}"
|
dest: "{{ provision_directory }}/{{ item }}"
|
||||||
mode: "0755"
|
mode: "0755"
|
||||||
|
@ -57,7 +57,7 @@
|
||||||
- cloud_vars is defined and cloud_vars
|
- cloud_vars is defined and cloud_vars
|
||||||
|
|
||||||
- name: Generate cloud-oriented vars files
|
- name: Generate cloud-oriented vars files
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ roles_path }}/copr/backend/templates/provision/{{ item }}"
|
src: "{{ roles_path }}/copr/backend/templates/provision/{{ item }}"
|
||||||
dest: "{{ provision_directory }}/{{ item }}"
|
dest: "{{ provision_directory }}/{{ item }}"
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -68,7 +68,7 @@
|
||||||
- cloud_vars is defined and cloud_vars
|
- cloud_vars is defined and cloud_vars
|
||||||
|
|
||||||
- name: Put copr-rpmbuild configuration file into the provision subdir
|
- name: Put copr-rpmbuild configuration file into the provision subdir
|
||||||
template: src="{{ roles_path }}/copr/backend/templates/provision/copr-rpmbuild/main.ini.j2"
|
ansible.builtin.template: src="{{ roles_path }}/copr/backend/templates/provision/copr-rpmbuild/main.ini.j2"
|
||||||
dest="{{ provision_directory }}/files/main.ini"
|
dest="{{ provision_directory }}/files/main.ini"
|
||||||
tags:
|
tags:
|
||||||
- provision_config
|
- provision_config
|
||||||
|
@ -76,7 +76,7 @@
|
||||||
when: "'copr_hypervisor' not in group_names"
|
when: "'copr_hypervisor' not in group_names"
|
||||||
|
|
||||||
- name: Put rpkg configuration file into the provision subdir
|
- name: Put rpkg configuration file into the provision subdir
|
||||||
template: src="{{ roles_path }}/copr/backend/templates/provision/rpkg.conf.j2"
|
ansible.builtin.template: src="{{ roles_path }}/copr/backend/templates/provision/rpkg.conf.j2"
|
||||||
dest="{{ provision_directory }}/files/rpkg.conf"
|
dest="{{ provision_directory }}/files/rpkg.conf"
|
||||||
tags:
|
tags:
|
||||||
- provision_config
|
- provision_config
|
||||||
|
@ -88,7 +88,7 @@
|
||||||
- provision_config
|
- provision_config
|
||||||
|
|
||||||
- name: Install the Oregon State University OpenStack token file on BE/HV
|
- name: Install the Oregon State University OpenStack token file on BE/HV
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ roles_path }}/copr/backend/templates/provision/rc-osuosl.sh.j2"
|
src: "{{ roles_path }}/copr/backend/templates/provision/rc-osuosl.sh.j2"
|
||||||
dest: "{{ provision_directory }}/.rc-osuosl.sh"
|
dest: "{{ provision_directory }}/.rc-osuosl.sh"
|
||||||
owner: "{{ provision_user }}"
|
owner: "{{ provision_user }}"
|
||||||
|
|
|
@ -126,7 +126,7 @@
|
||||||
# tags: ipv6_config
|
# tags: ipv6_config
|
||||||
|
|
||||||
- name: Install nrpe checks
|
- name: Install nrpe checks
|
||||||
template: src=copr_nrpe.cfg
|
ansible.builtin.template: src=copr_nrpe.cfg
|
||||||
dest=/etc/nrpe.d/copr_nrpe.cfg
|
dest=/etc/nrpe.d/copr_nrpe.cfg
|
||||||
notify:
|
notify:
|
||||||
- restart nrpe
|
- restart nrpe
|
||||||
|
|
|
@ -12,13 +12,13 @@
|
||||||
- certbot
|
- certbot
|
||||||
|
|
||||||
- name: Install certbot config
|
- name: Install certbot config
|
||||||
template: src=certbot.j2 dest=/etc/sysconfig/certbot
|
ansible.builtin.template: src=certbot.j2 dest=/etc/sysconfig/certbot
|
||||||
mode=0644
|
mode=0644
|
||||||
tags:
|
tags:
|
||||||
- certbot
|
- certbot
|
||||||
|
|
||||||
- name: Install certbot deploy script
|
- name: Install certbot deploy script
|
||||||
template: src={{ letsencrypt.predefined_deploy_script }}
|
ansible.builtin.template: src={{ letsencrypt.predefined_deploy_script }}
|
||||||
dest=/usr/libexec/auto-certbot-deploy
|
dest=/usr/libexec/auto-certbot-deploy
|
||||||
mode=0755
|
mode=0755
|
||||||
when: letsencrypt.predefined_deploy_script is defined
|
when: letsencrypt.predefined_deploy_script is defined
|
||||||
|
|
|
@ -41,7 +41,7 @@
|
||||||
- /var/log/copr-dist-git/
|
- /var/log/copr-dist-git/
|
||||||
|
|
||||||
- name: Install config for copr-dist-git
|
- name: Install config for copr-dist-git
|
||||||
template: src=copr-dist-git.conf.j2 dest=/etc/copr/copr-dist-git.conf mode=0644
|
ansible.builtin.template: src=copr-dist-git.conf.j2 dest=/etc/copr/copr-dist-git.conf mode=0644
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- copr_infrastructure_password
|
- copr_infrastructure_password
|
||||||
|
@ -79,7 +79,7 @@
|
||||||
- reload httpd
|
- reload httpd
|
||||||
|
|
||||||
- name: Install /etc/httpd/conf.d/ssl.conf
|
- name: Install /etc/httpd/conf.d/ssl.conf
|
||||||
template: src="ssl.conf.j2" dest="/etc/httpd/conf.d/ssl.conf" owner=root group=root mode=0644
|
ansible.builtin.template: src="ssl.conf.j2" dest="/etc/httpd/conf.d/ssl.conf" owner=root group=root mode=0644
|
||||||
notify:
|
notify:
|
||||||
- reload httpd
|
- reload httpd
|
||||||
|
|
||||||
|
@ -92,7 +92,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Install cgitrc
|
- name: Install cgitrc
|
||||||
template: src="cgitrc" dest="/etc/cgitrc" owner=root group=root mode=0644
|
ansible.builtin.template: src="cgitrc" dest="/etc/cgitrc" owner=root group=root mode=0644
|
||||||
|
|
||||||
- name: Allow httpd to run cgit
|
- name: Allow httpd to run cgit
|
||||||
seboolean: name=httpd_enable_cgi state=true persistent=true
|
seboolean: name=httpd_enable_cgi state=true persistent=true
|
||||||
|
@ -135,7 +135,7 @@
|
||||||
ansible.builtin.file: path=/home/copr-dist-git/.config state=directory
|
ansible.builtin.file: path=/home/copr-dist-git/.config state=directory
|
||||||
|
|
||||||
- name: Install .config/copr for copr-dist-git user (required for pruning)
|
- name: Install .config/copr for copr-dist-git user (required for pruning)
|
||||||
template: src="copr.conf" dest="/home/copr-dist-git/.config/copr" owner=copr-dist-git group=copr-dist-git
|
ansible.builtin.template: src="copr.conf" dest="/home/copr-dist-git/.config/copr" owner=copr-dist-git group=copr-dist-git
|
||||||
|
|
||||||
- name: Install the helper cron scripts
|
- name: Install the helper cron scripts
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
- name: Copy apache files to conf.d (templates)
|
- name: Copy apache files to conf.d (templates)
|
||||||
template: src="httpd/{{ item }}" dest="/etc/httpd/conf.d/{{ item }}"
|
ansible.builtin.template: src="httpd/{{ item }}" dest="/etc/httpd/conf.d/{{ item }}"
|
||||||
with_items:
|
with_items:
|
||||||
- "coprs.conf"
|
- "coprs.conf"
|
||||||
notify:
|
notify:
|
||||||
|
|
|
@ -84,7 +84,7 @@
|
||||||
owner=copr-fe mode=755
|
owner=copr-fe mode=755
|
||||||
|
|
||||||
- name: Install copr configs
|
- name: Install copr configs
|
||||||
template: src="copr.conf" dest=/etc/copr/copr.conf mode=600
|
ansible.builtin.template: src="copr.conf" dest=/etc/copr/copr.conf mode=600
|
||||||
notify:
|
notify:
|
||||||
- reload httpd
|
- reload httpd
|
||||||
- restart copr-fe-fedora-messaging-reader
|
- restart copr-fe-fedora-messaging-reader
|
||||||
|
@ -179,7 +179,7 @@
|
||||||
ansible.builtin.file: path=/etc/fedora-messaging state=directory
|
ansible.builtin.file: path=/etc/fedora-messaging state=directory
|
||||||
|
|
||||||
- name: Install fedora messaging config for Copr
|
- name: Install fedora messaging config for Copr
|
||||||
template: src="fedora-messaging/copr_messaging.toml" dest="/etc/fedora-messaging/copr_messaging.toml"
|
ansible.builtin.template: src="fedora-messaging/copr_messaging.toml" dest="/etc/fedora-messaging/copr_messaging.toml"
|
||||||
notify:
|
notify:
|
||||||
- restart copr-fe-fedora-messaging-reader
|
- restart copr-fe-fedora-messaging-reader
|
||||||
tags:
|
tags:
|
||||||
|
@ -225,7 +225,7 @@
|
||||||
dnf: name=nrpe state=present
|
dnf: name=nrpe state=present
|
||||||
|
|
||||||
- name: Install the check script
|
- name: Install the check script
|
||||||
template:
|
ansible.builtin.template:
|
||||||
dest: "/usr/bin/copr-cdn-check.py"
|
dest: "/usr/bin/copr-cdn-check.py"
|
||||||
src: "copr-cdn-check.py.j2"
|
src: "copr-cdn-check.py.j2"
|
||||||
group: "nagios"
|
group: "nagios"
|
||||||
|
|
|
@ -34,7 +34,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Set up some cronjobs to backup databases as configured
|
- name: Set up some cronjobs to backup databases as configured
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src="{{ files }}/../roles/postgresql_server/templates/cron-backup-database"
|
src="{{ files }}/../roles/postgresql_server/templates/cron-backup-database"
|
||||||
dest="/etc/cron.d/cron-backup-database-{{ item }}"
|
dest="/etc/cron.d/cron-backup-database-{{ item }}"
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -110,7 +110,7 @@
|
||||||
tags: libvirtd
|
tags: libvirtd
|
||||||
|
|
||||||
- name: Copy image pool config file to host
|
- name: Copy image pool config file to host
|
||||||
template: src=libvirt-pool-images.xml
|
ansible.builtin.template: src=libvirt-pool-images.xml
|
||||||
dest=/root/.tmp-ansible-file.xml
|
dest=/root/.tmp-ansible-file.xml
|
||||||
when: libvirt_pool_exists.changed
|
when: libvirt_pool_exists.changed
|
||||||
tags: libvirtd
|
tags: libvirtd
|
||||||
|
|
|
@ -22,7 +22,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Put config for signd
|
- name: Put config for signd
|
||||||
template: src="sign.conf" dest="/etc/sign.conf"
|
ansible.builtin.template: src="sign.conf" dest="/etc/sign.conf"
|
||||||
notify:
|
notify:
|
||||||
- restart obs-signd
|
- restart obs-signd
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -5,4 +5,4 @@
|
||||||
#
|
#
|
||||||
---
|
---
|
||||||
- name: Dump all ansible vars
|
- name: Dump all ansible vars
|
||||||
template: src=dumpall.j2 dest=/tmp/debug_env.out
|
ansible.builtin.template: src=dumpall.j2 dest=/tmp/debug_env.out
|
||||||
|
|
|
@ -56,7 +56,7 @@
|
||||||
# - config
|
# - config
|
||||||
|
|
||||||
# - name: Install stunnel.conf
|
# - name: Install stunnel.conf
|
||||||
# template: src={{ item.file }}
|
# ansible.builtin.template: src={{ item.file }}
|
||||||
# dest={{ item.dest }}
|
# dest={{ item.dest }}
|
||||||
# owner=root group=root mode=0600
|
# owner=root group=root mode=0600
|
||||||
# with_items:
|
# with_items:
|
||||||
|
@ -120,7 +120,7 @@
|
||||||
- pagure
|
- pagure
|
||||||
|
|
||||||
- name: Copy sundry pagure configuration
|
- name: Copy sundry pagure configuration
|
||||||
template: src={{ item.file }}
|
ansible.builtin.template: src={{ item.file }}
|
||||||
dest={{ item.location }}/{{ item.file }}
|
dest={{ item.location }}/{{ item.file }}
|
||||||
owner=pagure group=postfix mode=0640
|
owner=pagure group=postfix mode=0640
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -140,7 +140,7 @@
|
||||||
- restart apache
|
- restart apache
|
||||||
|
|
||||||
- name: Pagure configuration for the hooks
|
- name: Pagure configuration for the hooks
|
||||||
template: src={{ item.file }}
|
ansible.builtin.template: src={{ item.file }}
|
||||||
dest={{ item.location }}/{{ item.file }}
|
dest={{ item.location }}/{{ item.file }}
|
||||||
owner=pagure group=packager mode=0640
|
owner=pagure group=packager mode=0640
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -195,7 +195,7 @@
|
||||||
- pagure
|
- pagure
|
||||||
|
|
||||||
- name: Install the apache configuration file
|
- name: Install the apache configuration file
|
||||||
template: src={{ item }} dest=/etc/httpd/conf.d/{{ item }}
|
ansible.builtin.template: src={{ item }} dest=/etc/httpd/conf.d/{{ item }}
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
- z_pagure.conf
|
- z_pagure.conf
|
||||||
|
@ -207,7 +207,7 @@
|
||||||
- restart apache
|
- restart apache
|
||||||
|
|
||||||
- name: Install the wsgi file
|
- name: Install the wsgi file
|
||||||
template: src={{ item }}
|
ansible.builtin.template: src={{ item }}
|
||||||
dest=/var/www/{{ item }}
|
dest=/var/www/{{ item }}
|
||||||
owner=pagure group=pagure mode=0644
|
owner=pagure group=pagure mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -327,7 +327,7 @@
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
||||||
- name: Install the configuration file for fedora-messaging
|
- name: Install the configuration file for fedora-messaging
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src=fedora-messaging.toml
|
src=fedora-messaging.toml
|
||||||
dest=/etc/fedora-messaging/config.toml
|
dest=/etc/fedora-messaging/config.toml
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -28,14 +28,14 @@
|
||||||
- distgit
|
- distgit
|
||||||
|
|
||||||
- name: Install the mod_auth_openidc configuration
|
- name: Install the mod_auth_openidc configuration
|
||||||
template: src=auth_openidc.conf dest=/etc/httpd/conf.d/auth_openidc.conf
|
ansible.builtin.template: src=auth_openidc.conf dest=/etc/httpd/conf.d/auth_openidc.conf
|
||||||
notify:
|
notify:
|
||||||
- reload httpd
|
- reload httpd
|
||||||
tags:
|
tags:
|
||||||
- distgit
|
- distgit
|
||||||
|
|
||||||
- name: Install the http push configuration
|
- name: Install the http push configuration
|
||||||
template: src=httppush.conf dest=/etc/httpd/conf.d/httpush.conf
|
ansible.builtin.template: src=httppush.conf dest=/etc/httpd/conf.d/httpush.conf
|
||||||
notify:
|
notify:
|
||||||
- reload httpd
|
- reload httpd
|
||||||
tags:
|
tags:
|
||||||
|
@ -236,7 +236,7 @@
|
||||||
# -- Lookaside Cache -------------------------------------
|
# -- Lookaside Cache -------------------------------------
|
||||||
# This is the annex to Dist Git, where we host source tarballs.
|
# This is the annex to Dist Git, where we host source tarballs.
|
||||||
- name: Install the Lookaside Cache httpd configs
|
- name: Install the Lookaside Cache httpd configs
|
||||||
template: src={{item}} dest=/etc/httpd/conf.d/dist-git/{{item}}
|
ansible.builtin.template: src={{item}} dest=/etc/httpd/conf.d/dist-git/{{item}}
|
||||||
with_items:
|
with_items:
|
||||||
- lookaside.conf
|
- lookaside.conf
|
||||||
- lookaside-upload.conf
|
- lookaside-upload.conf
|
||||||
|
|
|
@ -12,7 +12,7 @@
|
||||||
- docker-distribution
|
- docker-distribution
|
||||||
|
|
||||||
- name: Configure docker-distribution
|
- name: Configure docker-distribution
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: config.yml.j2
|
src: config.yml.j2
|
||||||
dest: "{{ conf_path }}"
|
dest: "{{ conf_path }}"
|
||||||
notify: restart docker-distribution
|
notify: restart docker-distribution
|
||||||
|
|
|
@ -34,7 +34,7 @@
|
||||||
- selinux
|
- selinux
|
||||||
|
|
||||||
- name: /etc/motd_fedora
|
- name: /etc/motd_fedora
|
||||||
template: src=rsync/motd_fedora.j2 dest=/etc/motd_fedora
|
ansible.builtin.template: src=rsync/motd_fedora.j2 dest=/etc/motd_fedora
|
||||||
|
|
||||||
- name: Configure logrotate for /var/log/rsyncd-fedora.log
|
- name: Configure logrotate for /var/log/rsyncd-fedora.log
|
||||||
ansible.builtin.copy: src=logrotate-rsync-fedora dest=/etc/logrotate.d/rsync-fedora
|
ansible.builtin.copy: src=logrotate-rsync-fedora dest=/etc/logrotate.d/rsync-fedora
|
||||||
|
@ -65,7 +65,7 @@
|
||||||
ansible.builtin.copy: src="{{private}}/files/httpd/wildcard-2024.fedoraproject.org.intermediate.cert" dest=/etc/pki/tls/certs/wildcard-2024.fedoraproject.org.intermediate.cert owner=root group=root mode=0644
|
ansible.builtin.copy: src="{{private}}/files/httpd/wildcard-2024.fedoraproject.org.intermediate.cert" dest=/etc/pki/tls/certs/wildcard-2024.fedoraproject.org.intermediate.cert owner=root group=root mode=0644
|
||||||
|
|
||||||
- name: Configure httpd dl main conf
|
- name: Configure httpd dl main conf
|
||||||
template: src=httpd/dl.fedoraproject.org.conf dest=/etc/httpd/conf.d/dl.fedoraproject.org.conf
|
ansible.builtin.template: src=httpd/dl.fedoraproject.org.conf dest=/etc/httpd/conf.d/dl.fedoraproject.org.conf
|
||||||
tags:
|
tags:
|
||||||
- httpd
|
- httpd
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -53,7 +53,7 @@
|
||||||
- easyfix
|
- easyfix
|
||||||
|
|
||||||
- name: Install the easyfix script
|
- name: Install the easyfix script
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=gather_easyfix.py dest=/usr/local/bin/gather_easyfix.py
|
src=gather_easyfix.py dest=/usr/local/bin/gather_easyfix.py
|
||||||
owner=root group=root mode=0755
|
owner=root group=root mode=0755
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -6,7 +6,7 @@
|
||||||
- easyfix/proxy
|
- easyfix/proxy
|
||||||
|
|
||||||
- name: Put the proxy config in place
|
- name: Put the proxy config in place
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=gather-easyfix.conf
|
src=gather-easyfix.conf
|
||||||
dest=/etc/httpd/conf.d/{{website}}/gather-easyfix.conf
|
dest=/etc/httpd/conf.d/{{website}}/gather-easyfix.conf
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
---
|
---
|
||||||
# generate the templates for project to be created
|
# generate the templates for project to be created
|
||||||
- name: Create the templates
|
- name: Create the templates
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "secret-discourse-apikey.yml"
|
src: "secret-discourse-apikey.yml"
|
||||||
dest: "/root/ocp4/openshift-apps/fas2discourse-operator/secret-discourse-apikey.yml"
|
dest: "/root/ocp4/openshift-apps/fas2discourse-operator/secret-discourse-apikey.yml"
|
||||||
mode: "0770"
|
mode: "0770"
|
||||||
|
|
|
@ -9,7 +9,7 @@
|
||||||
|
|
||||||
# generate the templates for project to be created
|
# generate the templates for project to be created
|
||||||
- name: Copy the templates to the host
|
- name: Copy the templates to the host
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "secret-keytab.yml"
|
src: "secret-keytab.yml"
|
||||||
dest: "/root/ocp4/openshift-apps/fas2discourse-operator/secret-keytab.yml"
|
dest: "/root/ocp4/openshift-apps/fas2discourse-operator/secret-keytab.yml"
|
||||||
mode: "0770"
|
mode: "0770"
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
---
|
---
|
||||||
# generate the templates for project to be created
|
# generate the templates for project to be created
|
||||||
- name: Create the templates
|
- name: Create the templates
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "namespace.yml"
|
src: "namespace.yml"
|
||||||
dest: "/root/ocp4/openshift-apps/fas2discourse-operator/namespace.yml"
|
dest: "/root/ocp4/openshift-apps/fas2discourse-operator/namespace.yml"
|
||||||
mode: "0770"
|
mode: "0770"
|
||||||
|
|
|
@ -14,7 +14,7 @@
|
||||||
- fasjson
|
- fasjson
|
||||||
|
|
||||||
- name: Fasjson-aliases script
|
- name: Fasjson-aliases script
|
||||||
template: src=fasjson-aliases.j2 dest=/usr/local/bin/fasjson-aliases owner=root mode=0755
|
ansible.builtin.template: src=fasjson-aliases.j2 dest=/usr/local/bin/fasjson-aliases owner=root mode=0755
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- fasjson
|
- fasjson
|
||||||
|
|
|
@ -69,7 +69,7 @@
|
||||||
# *conditionally* restart these services, only if they are installed on the
|
# *conditionally* restart these services, only if they are installed on the
|
||||||
# system.
|
# system.
|
||||||
- name: Setup basic /etc/fedmsg.d/ contents for internal hosts
|
- name: Setup basic /etc/fedmsg.d/ contents for internal hosts
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src="{{ item }}.j2"
|
src="{{ item }}.j2"
|
||||||
dest="/etc/fedmsg.d/{{ item }}"
|
dest="/etc/fedmsg.d/{{ item }}"
|
||||||
owner=root
|
owner=root
|
||||||
|
@ -100,7 +100,7 @@
|
||||||
- restart fedmsg-relay
|
- restart fedmsg-relay
|
||||||
|
|
||||||
- name: Dynamically generate policy from group/host vars.
|
- name: Dynamically generate policy from group/host vars.
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src="{{ item }}.j2"
|
src="{{ item }}.j2"
|
||||||
dest="/etc/fedmsg.d/{{ item }}"
|
dest="/etc/fedmsg.d/{{ item }}"
|
||||||
owner=root
|
owner=root
|
||||||
|
@ -122,7 +122,7 @@
|
||||||
- restart fedmsg-relay
|
- restart fedmsg-relay
|
||||||
|
|
||||||
- name: Setup basic /etc/fedmsg.d/ contents for firewalled/external hosts
|
- name: Setup basic /etc/fedmsg.d/ contents for firewalled/external hosts
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src="{{ item }}.j2"
|
src="{{ item }}.j2"
|
||||||
dest="/etc/fedmsg.d/{{ item }}"
|
dest="/etc/fedmsg.d/{{ item }}"
|
||||||
owner=root
|
owner=root
|
||||||
|
|
|
@ -33,7 +33,7 @@
|
||||||
- fedmsg/proxy
|
- fedmsg/proxy
|
||||||
|
|
||||||
- name: Put the proxy config in place
|
- name: Put the proxy config in place
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=fedmsg.conf
|
src=fedmsg.conf
|
||||||
dest=/etc/httpd/conf.d/{{website}}/fedmsg.conf
|
dest=/etc/httpd/conf.d/{{website}}/fedmsg.conf
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
|
|
|
@ -46,7 +46,7 @@
|
||||||
- fedmsg/gateway/slave
|
- fedmsg/gateway/slave
|
||||||
|
|
||||||
- name: Install /etc/fedmsg.d/fedmsg-gateway-slave.py
|
- name: Install /etc/fedmsg.d/fedmsg-gateway-slave.py
|
||||||
template: src={{ item.file }}
|
ansible.builtin.template: src={{ item.file }}
|
||||||
dest={{ item.dest }}
|
dest={{ item.dest }}
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -86,7 +86,7 @@
|
||||||
- fedmsg/gateway/slave
|
- fedmsg/gateway/slave
|
||||||
|
|
||||||
- name: Install stunnel.conf
|
- name: Install stunnel.conf
|
||||||
template: src={{ item.file }}
|
ansible.builtin.template: src={{ item.file }}
|
||||||
dest={{ item.dest }}
|
dest={{ item.dest }}
|
||||||
owner=root group=root mode=0600
|
owner=root group=root mode=0600
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -73,7 +73,7 @@
|
||||||
- fedmsg/hub
|
- fedmsg/hub
|
||||||
|
|
||||||
- name: Install systemd config file
|
- name: Install systemd config file
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: fedmsg-hub-systemd.conf.j2
|
src: fedmsg-hub-systemd.conf.j2
|
||||||
dest: "/etc/systemd/system/{{ item }}.service.d/systemd.conf"
|
dest: "/etc/systemd/system/{{ item }}.service.d/systemd.conf"
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -22,7 +22,7 @@
|
||||||
- fedmsgmonitor
|
- fedmsgmonitor
|
||||||
|
|
||||||
- name: Setup fedmsg-irc config file
|
- name: Setup fedmsg-irc config file
|
||||||
template: src=ircbot.py dest=/etc/fedmsg.d/ircbot.py
|
ansible.builtin.template: src=ircbot.py dest=/etc/fedmsg.d/ircbot.py
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- fedmsg/irc
|
- fedmsg/irc
|
||||||
|
@ -30,7 +30,7 @@
|
||||||
- restart fedmsg-irc
|
- restart fedmsg-irc
|
||||||
|
|
||||||
- name: Setup fas credentials config file
|
- name: Setup fas credentials config file
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=fas-credentials.py
|
src=fas-credentials.py
|
||||||
dest=/etc/fedmsg.d/fas-credentials.py
|
dest=/etc/fedmsg.d/fas-credentials.py
|
||||||
mode=0640
|
mode=0640
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
---
|
---
|
||||||
- ansible.builtin.file: dest=/srv/web/budget.fedoraproject.org state=directory
|
- ansible.builtin.file: dest=/srv/web/budget.fedoraproject.org state=directory
|
||||||
|
|
||||||
- template: >
|
- ansible.builtin.template: >
|
||||||
src=budget-sync.j2 dest=/usr/local/bin/budget-sync
|
src=budget-sync.j2 dest=/usr/local/bin/budget-sync
|
||||||
owner=root group=root mode=0755
|
owner=root group=root mode=0755
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
---
|
---
|
||||||
- template: >
|
- ansible.builtin.template: >
|
||||||
src=docs-sync.j2 dest=/usr/local/bin/docs-sync
|
src=docs-sync.j2 dest=/usr/local/bin/docs-sync
|
||||||
owner=root group=root mode=0755
|
owner=root group=root mode=0755
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -27,7 +27,7 @@
|
||||||
- fedoraproject_s3_bucket_name is defined
|
- fedoraproject_s3_bucket_name is defined
|
||||||
|
|
||||||
- name: Create fedoraproject-sync script
|
- name: Create fedoraproject-sync script
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: fedoraproject-sync
|
src: fedoraproject-sync
|
||||||
dest: /usr/local/sbin/fedoraproject-sync
|
dest: /usr/local/sbin/fedoraproject-sync
|
||||||
mode: "0700"
|
mode: "0700"
|
||||||
|
@ -68,7 +68,7 @@
|
||||||
- fedora-web/google-site-verification
|
- fedora-web/google-site-verification
|
||||||
|
|
||||||
- name: And one template (for {{website}})
|
- name: And one template (for {{website}})
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src={{item}} dest=/etc/httpd/conf.d/{{website}}/{{item}}
|
src={{item}} dest=/etc/httpd/conf.d/{{website}}/{{item}}
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -107,7 +107,7 @@
|
||||||
- fedora-web/google-site-verification
|
- fedora-web/google-site-verification
|
||||||
|
|
||||||
- name: And, copy over a template for browserid
|
- name: And, copy over a template for browserid
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=browserid.fedoraproject.org dest=/srv/web/browserid.fedoraproject.org
|
src=browserid.fedoraproject.org dest=/srv/web/browserid.fedoraproject.org
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
notify:
|
notify:
|
||||||
|
|
|
@ -19,7 +19,7 @@
|
||||||
- fedora-web/registry
|
- fedora-web/registry
|
||||||
|
|
||||||
- name: Copy in the sync-registry-index cronjob
|
- name: Copy in the sync-registry-index cronjob
|
||||||
template: src=cron-sync-registry-index dest=/etc/cron.d/sync-registry-index
|
ansible.builtin.template: src=cron-sync-registry-index dest=/etc/cron.d/sync-registry-index
|
||||||
tags:
|
tags:
|
||||||
- fedora-web
|
- fedora-web
|
||||||
- fedora-web/registry
|
- fedora-web/registry
|
||||||
|
|
|
@ -143,7 +143,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Configure fedora-messaging fedora_nightlies
|
- name: Configure fedora-messaging fedora_nightlies
|
||||||
template: src=fedora_nightlies.toml.j2 dest=/etc/fedora-messaging/fedora_nightlies.toml owner=root group=root mode=0640
|
ansible.builtin.template: src=fedora_nightlies.toml.j2 dest=/etc/fedora-messaging/fedora_nightlies.toml owner=root group=root mode=0640
|
||||||
notify:
|
notify:
|
||||||
- restart fedora_nightlies
|
- restart fedora_nightlies
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -33,7 +33,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Install squid configuration file
|
- name: Install squid configuration file
|
||||||
template: src=squid.conf dest=/etc/squid/squid.conf owner=squid group=squid
|
ansible.builtin.template: src=squid.conf dest=/etc/squid/squid.conf owner=squid group=squid
|
||||||
tags:
|
tags:
|
||||||
- flatpak-cache
|
- flatpak-cache
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
---
|
---
|
||||||
- name: Copy in the proxy conf
|
- name: Copy in the proxy conf
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=geoip-city-wsgi-proxy.conf
|
src=geoip-city-wsgi-proxy.conf
|
||||||
dest=/etc/httpd/conf.d/{{website}}/geoip-city-wsgi-proxy.conf
|
dest=/etc/httpd/conf.d/{{website}}/geoip-city-wsgi-proxy.conf
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
|
|
|
@ -17,7 +17,7 @@
|
||||||
tags: git/server
|
tags: git/server
|
||||||
|
|
||||||
- name: Configure git daemon
|
- name: Configure git daemon
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src="git@.service.j2"
|
src="git@.service.j2"
|
||||||
dest="/usr/lib/systemd/system/git@.service"
|
dest="/usr/lib/systemd/system/git@.service"
|
||||||
mode=0644
|
mode=0644
|
||||||
|
@ -25,7 +25,7 @@
|
||||||
tags: git/server
|
tags: git/server
|
||||||
|
|
||||||
- name: Configure git daemon
|
- name: Configure git daemon
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src="git@.service.j2"
|
src="git@.service.j2"
|
||||||
dest="/usr/lib/systemd/system/git@.service"
|
dest="/usr/lib/systemd/system/git@.service"
|
||||||
mode=0644
|
mode=0644
|
||||||
|
@ -39,7 +39,7 @@
|
||||||
tags: git/server
|
tags: git/server
|
||||||
|
|
||||||
- name: Install the xinetd config file
|
- name: Install the xinetd config file
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src="git.j2"
|
src="git.j2"
|
||||||
dest="/etc/xinetd.d/git"
|
dest="/etc/xinetd.d/git"
|
||||||
mode=0644
|
mode=0644
|
||||||
|
|
|
@ -21,7 +21,7 @@
|
||||||
- github2fedmsg
|
- github2fedmsg
|
||||||
|
|
||||||
- name: Copy github2fedmsg app configuration
|
- name: Copy github2fedmsg app configuration
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src={{ item }} dest="/etc/github2fedmsg/{{ item }}"
|
src={{ item }} dest="/etc/github2fedmsg/{{ item }}"
|
||||||
owner=apache group=apache mode=0600
|
owner=apache group=apache mode=0600
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -45,7 +45,7 @@
|
||||||
- restart apache
|
- restart apache
|
||||||
|
|
||||||
- name: Copy github2fedmsg httpd config
|
- name: Copy github2fedmsg httpd config
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src={{ item }} dest="/etc/httpd/conf.d/{{ item }}"
|
src={{ item }} dest="/etc/httpd/conf.d/{{ item }}"
|
||||||
owner=apache group=apache mode=0644
|
owner=apache group=apache mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -22,16 +22,16 @@
|
||||||
- grokmirror-mirror
|
- grokmirror-mirror
|
||||||
|
|
||||||
- name: Install grokmirror config file from template
|
- name: Install grokmirror config file from template
|
||||||
template: src=grokmirror.conf dest={{grokmirror_topdir}}/grokmirror.conf owner=root group=root mode=644
|
ansible.builtin.template: src=grokmirror.conf dest={{grokmirror_topdir}}/grokmirror.conf owner=root group=root mode=644
|
||||||
tags:
|
tags:
|
||||||
- grokmirror-mirror
|
- grokmirror-mirror
|
||||||
|
|
||||||
- name: Install grokmirror repos cron job
|
- name: Install grokmirror repos cron job
|
||||||
template: src=grokmirror.cron dest=/etc/cron.d/grokmirror.cron owner=root group=root mode=644
|
ansible.builtin.template: src=grokmirror.cron dest=/etc/cron.d/grokmirror.cron owner=root group=root mode=644
|
||||||
tags:
|
tags:
|
||||||
- grokmirror-mirror
|
- grokmirror-mirror
|
||||||
|
|
||||||
- name: Install grokmirror fsck cron job
|
- name: Install grokmirror fsck cron job
|
||||||
template: src=grokfsck.cron dest=/etc/cron.d/grokfsck.cron owner=root group=root mode=644
|
ansible.builtin.template: src=grokfsck.cron dest=/etc/cron.d/grokfsck.cron owner=root group=root mode=644
|
||||||
tags:
|
tags:
|
||||||
- grokmirror-mirror
|
- grokmirror-mirror
|
||||||
|
|
|
@ -5,7 +5,7 @@
|
||||||
- haproxy
|
- haproxy
|
||||||
- haproxy/rewrite
|
- haproxy/rewrite
|
||||||
|
|
||||||
- template: src=rewrite.conf dest=/etc/httpd/conf.d/{{website}}/haproxy.conf
|
- ansible.builtin.template: src=rewrite.conf dest=/etc/httpd/conf.d/{{website}}/haproxy.conf
|
||||||
notify:
|
notify:
|
||||||
- reload httpd
|
- reload httpd
|
||||||
tags:
|
tags:
|
||||||
|
@ -13,7 +13,7 @@
|
||||||
- haproxy/rewrite
|
- haproxy/rewrite
|
||||||
when: not inventory_hostname.startswith('proxy')
|
when: not inventory_hostname.startswith('proxy')
|
||||||
|
|
||||||
- template: src=rewrite.conf dest=/etc/httpd/conf.d/{{website}}/haproxy.conf
|
- ansible.builtin.template: src=rewrite.conf dest=/etc/httpd/conf.d/{{website}}/haproxy.conf
|
||||||
notify:
|
notify:
|
||||||
- reload proxyhttpd
|
- reload proxyhttpd
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -11,7 +11,7 @@
|
||||||
- haproxy
|
- haproxy
|
||||||
|
|
||||||
- name: Install haproxy/cfg
|
- name: Install haproxy/cfg
|
||||||
template: src={{ item.file }}
|
ansible.builtin.template: src={{ item.file }}
|
||||||
dest={{ item.dest }}
|
dest={{ item.dest }}
|
||||||
owner=root group=root mode=0600
|
owner=root group=root mode=0600
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -7,7 +7,7 @@
|
||||||
|
|
||||||
---
|
---
|
||||||
- name: Copy in domain rewrite for {{destname}} ({{website}}{{path}})
|
- name: Copy in domain rewrite for {{destname}} ({{website}}{{path}})
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src={{item}}
|
src={{item}}
|
||||||
dest=/etc/httpd/conf.d/{{website}}/{{destname}}-rewrite.conf
|
dest=/etc/httpd/conf.d/{{website}}/{{destname}}-rewrite.conf
|
||||||
owner=root
|
owner=root
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
---
|
---
|
||||||
- template: >
|
- ansible.builtin.template: >
|
||||||
src=mime-types.conf dest=/etc/httpd/conf.d/{{website}}/mime-types.conf
|
src=mime-types.conf dest=/etc/httpd/conf.d/{{website}}/mime-types.conf
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
notify:
|
notify:
|
||||||
|
|
|
@ -6,7 +6,7 @@
|
||||||
- reload proxyhttpd
|
- reload proxyhttpd
|
||||||
|
|
||||||
- name: Copy in the main httpd.conf file for proxy nodes
|
- name: Copy in the main httpd.conf file for proxy nodes
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=httpd.conf.j2 dest=/etc/httpd/conf/httpd.conf
|
src=httpd.conf.j2 dest=/etc/httpd/conf/httpd.conf
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
notify:
|
notify:
|
||||||
|
@ -24,7 +24,7 @@
|
||||||
- httpd/proxy
|
- httpd/proxy
|
||||||
|
|
||||||
- name: Copy over some basic configs into /etc/httpd/conf.d/
|
- name: Copy over some basic configs into /etc/httpd/conf.d/
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src={{item}} dest=/etc/httpd/conf.d/{{item}}
|
src={{item}} dest=/etc/httpd/conf.d/{{item}}
|
||||||
owner=root group=root mode=0644
|
owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -8,7 +8,7 @@
|
||||||
# This is the only real work we do.
|
# This is the only real work we do.
|
||||||
---
|
---
|
||||||
- name: Copy over httpd redirect file for {{shortname}}
|
- name: Copy over httpd redirect file for {{shortname}}
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src={{item}}
|
src={{item}}
|
||||||
dest=/etc/httpd/conf.d/{{website}}/{{shortname}}-redirect.conf
|
dest=/etc/httpd/conf.d/{{website}}/{{shortname}}-redirect.conf
|
||||||
mode=0644
|
mode=0644
|
||||||
|
|
|
@ -15,7 +15,7 @@
|
||||||
mode: '0755'
|
mode: '0755'
|
||||||
|
|
||||||
- name: Copy over httpd redirectmatch file for {{shortname}}
|
- name: Copy over httpd redirectmatch file for {{shortname}}
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=redirectmatch.conf
|
src=redirectmatch.conf
|
||||||
dest=/etc/httpd/conf.d/{{website}}/{{shortname}}-redirectmatch.conf
|
dest=/etc/httpd/conf.d/{{website}}/{{shortname}}-redirectmatch.conf
|
||||||
mode=0644
|
mode=0644
|
||||||
|
|
|
@ -9,7 +9,7 @@
|
||||||
|
|
||||||
---
|
---
|
||||||
- name: Copy in ProxyPassReverse for {{destname}} ({{website}}{{remotepath}})
|
- name: Copy in ProxyPassReverse for {{destname}} ({{website}}{{remotepath}})
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src={{item}}
|
src={{item}}
|
||||||
dest=/etc/httpd/conf.d/{{website}}/{{destname}}.conf
|
dest=/etc/httpd/conf.d/{{website}}/{{destname}}.conf
|
||||||
owner=root
|
owner=root
|
||||||
|
|
|
@ -30,7 +30,7 @@
|
||||||
- letsencrypt
|
- letsencrypt
|
||||||
|
|
||||||
- name: Copy over primary template for {{site_name}}
|
- name: Copy over primary template for {{site_name}}
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=website.conf
|
src=website.conf
|
||||||
dest=/etc/httpd/conf.d/{{site_name}}.conf
|
dest=/etc/httpd/conf.d/{{site_name}}.conf
|
||||||
owner=root
|
owner=root
|
||||||
|
@ -45,7 +45,7 @@
|
||||||
- sslciphers
|
- sslciphers
|
||||||
|
|
||||||
- name: Copy over some subordinate templates for {{site_name}}
|
- name: Copy over some subordinate templates for {{site_name}}
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src={{item}}.conf
|
src={{item}}.conf
|
||||||
dest=/etc/httpd/conf.d/{{site_name}}/{{item}}.conf
|
dest=/etc/httpd/conf.d/{{site_name}}/{{item}}.conf
|
||||||
owner=root
|
owner=root
|
||||||
|
@ -77,7 +77,7 @@
|
||||||
- robots
|
- robots
|
||||||
|
|
||||||
- name: And lastly, the robots.txt file
|
- name: And lastly, the robots.txt file
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src={{item}}
|
src={{item}}
|
||||||
dest=/srv/web/{{site_name}}-robots.txt
|
dest=/srv/web/{{site_name}}-robots.txt
|
||||||
mode=0644
|
mode=0644
|
||||||
|
|
|
@ -74,7 +74,7 @@
|
||||||
run_once: yes
|
run_once: yes
|
||||||
|
|
||||||
- name: Ensure that nss knows to skip certain users (f41/rhel)
|
- name: Ensure that nss knows to skip certain users (f41/rhel)
|
||||||
template: src=fedora-nss-ignore.conf.j2 dest=/etc/sssd/conf.d/fedora-nss-ignore.conf mode=600 owner=sssd group=sssd
|
ansible.builtin.template: src=fedora-nss-ignore.conf.j2 dest=/etc/sssd/conf.d/fedora-nss-ignore.conf mode=600 owner=sssd group=sssd
|
||||||
tags:
|
tags:
|
||||||
- ipa/client
|
- ipa/client
|
||||||
- config
|
- config
|
||||||
|
@ -85,7 +85,7 @@
|
||||||
when: ansible_distribution_major_version|int >= 41 or ansible_distribution == 'RedHat'
|
when: ansible_distribution_major_version|int >= 41 or ansible_distribution == 'RedHat'
|
||||||
|
|
||||||
- name: Ensure that nss knows to skip certain users (f40)
|
- name: Ensure that nss knows to skip certain users (f40)
|
||||||
template: src=fedora-nss-ignore.conf.j2 dest=/etc/sssd/conf.d/fedora-nss-ignore.conf mode=600 owner=root group=root
|
ansible.builtin.template: src=fedora-nss-ignore.conf.j2 dest=/etc/sssd/conf.d/fedora-nss-ignore.conf mode=600 owner=root group=root
|
||||||
tags:
|
tags:
|
||||||
- ipa/client
|
- ipa/client
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -106,7 +106,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Copy ipsilon configuration
|
- name: Copy ipsilon configuration
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "ipsilon.conf"
|
src: "ipsilon.conf"
|
||||||
dest: "/etc/ipsilon/root/ipsilon.conf"
|
dest: "/etc/ipsilon/root/ipsilon.conf"
|
||||||
owner: ipsilon
|
owner: ipsilon
|
||||||
|
@ -119,7 +119,7 @@
|
||||||
- restart apache
|
- restart apache
|
||||||
|
|
||||||
- name: Copy ipsilon admin configuration
|
- name: Copy ipsilon admin configuration
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "configuration.conf"
|
src: "configuration.conf"
|
||||||
dest: "/etc/ipsilon/root/configuration.conf"
|
dest: "/etc/ipsilon/root/configuration.conf"
|
||||||
owner: ipsilon
|
owner: ipsilon
|
||||||
|
@ -146,7 +146,7 @@
|
||||||
- restart apache
|
- restart apache
|
||||||
|
|
||||||
- name: Copy ipsilon httpd config
|
- name: Copy ipsilon httpd config
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "httpd.conf.j2"
|
src: "httpd.conf.j2"
|
||||||
dest: /etc/ipsilon/root/idp.conf
|
dest: /etc/ipsilon/root/idp.conf
|
||||||
tags:
|
tags:
|
||||||
|
@ -197,7 +197,7 @@
|
||||||
- ipsilon
|
- ipsilon
|
||||||
|
|
||||||
- name: Copy saml2 metadata script
|
- name: Copy saml2 metadata script
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: prepare-saml2-metadata.py
|
src: prepare-saml2-metadata.py
|
||||||
dest: /usr/local/bin/prepare-saml2-metadata
|
dest: /usr/local/bin/prepare-saml2-metadata
|
||||||
owner: root
|
owner: root
|
||||||
|
@ -258,7 +258,7 @@
|
||||||
- ipsilon
|
- ipsilon
|
||||||
|
|
||||||
- name: Copy SSSd configuration
|
- name: Copy SSSd configuration
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: sssd.conf
|
src: sssd.conf
|
||||||
dest: /etc/sssd/sssd.conf
|
dest: /etc/sssd/sssd.conf
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -49,7 +49,7 @@
|
||||||
- config
|
- config
|
||||||
|
|
||||||
- name: Setup initiatorname.iscsi
|
- name: Setup initiatorname.iscsi
|
||||||
template: src=initiatorname.iscsi.j2 dest=/etc/iscsi/initiatorname.iscsi
|
ansible.builtin.template: src=initiatorname.iscsi.j2 dest=/etc/iscsi/initiatorname.iscsi
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
||||||
|
|
|
@ -15,7 +15,7 @@
|
||||||
- keepalived
|
- keepalived
|
||||||
|
|
||||||
- name: Install keepalived template
|
- name: Install keepalived template
|
||||||
template: src=keepalived.conf.j2 dest=/etc/keepalived/keepalived.conf
|
ansible.builtin.template: src=keepalived.conf.j2 dest=/etc/keepalived/keepalived.conf
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- keepalived
|
- keepalived
|
||||||
|
|
|
@ -22,7 +22,7 @@
|
||||||
- kerneltest
|
- kerneltest
|
||||||
|
|
||||||
- name: Install all the configuration file of kerneltest
|
- name: Install all the configuration file of kerneltest
|
||||||
template: src={{ item.file }}
|
ansible.builtin.template: src={{ item.file }}
|
||||||
dest={{ item.location }}/{{ item.file }}
|
dest={{ item.location }}/{{ item.file }}
|
||||||
owner=apache group=apache mode=0600
|
owner=apache group=apache mode=0600
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -133,7 +133,7 @@
|
||||||
- koji_builder
|
- koji_builder
|
||||||
|
|
||||||
- name: Configure flatpak-builder plugin
|
- name: Configure flatpak-builder plugin
|
||||||
template: src=flatpak.conf dest=/etc/kojid/plugins/flatpak.conf
|
ansible.builtin.template: src=flatpak.conf dest=/etc/kojid/plugins/flatpak.conf
|
||||||
vars:
|
vars:
|
||||||
candidate_registry: "candidate-registry{{ env_suffix }}.fedoraproject.org"
|
candidate_registry: "candidate-registry{{ env_suffix }}.fedoraproject.org"
|
||||||
notify:
|
notify:
|
||||||
|
@ -153,7 +153,7 @@
|
||||||
- koji_builder
|
- koji_builder
|
||||||
|
|
||||||
- name: Build /etc/kojid/kojid.conf from group vars
|
- name: Build /etc/kojid/kojid.conf from group vars
|
||||||
template: src=kojid.conf dest=/etc/kojid/kojid.conf
|
ansible.builtin.template: src=kojid.conf dest=/etc/kojid/kojid.conf
|
||||||
notify:
|
notify:
|
||||||
- restart kojid
|
- restart kojid
|
||||||
tags:
|
tags:
|
||||||
|
@ -167,7 +167,7 @@
|
||||||
- koji_builder_osbuild
|
- koji_builder_osbuild
|
||||||
|
|
||||||
- name: Build /etc/koji-osbuild/builder.conf
|
- name: Build /etc/koji-osbuild/builder.conf
|
||||||
template: src=builder.conf{{env_suffix}} dest=/etc/koji-osbuild/builder.conf
|
ansible.builtin.template: src=builder.conf{{env_suffix}} dest=/etc/koji-osbuild/builder.conf
|
||||||
notify:
|
notify:
|
||||||
- restart kojid
|
- restart kojid
|
||||||
tags:
|
tags:
|
||||||
|
@ -175,12 +175,12 @@
|
||||||
- koji_builder_osbuild
|
- koji_builder_osbuild
|
||||||
|
|
||||||
- name: Build /etc/koji/koji.conf from group vars
|
- name: Build /etc/koji/koji.conf from group vars
|
||||||
template: src=koji.conf dest=/etc/koji.conf
|
ansible.builtin.template: src=koji.conf dest=/etc/koji.conf
|
||||||
tags:
|
tags:
|
||||||
- koji_builder
|
- koji_builder
|
||||||
|
|
||||||
- name: Config for the kojid runroot plugin (only some builders)
|
- name: Config for the kojid runroot plugin (only some builders)
|
||||||
template: src=runroot.conf.j2 dest=/etc/kojid/plugins/runroot.conf
|
ansible.builtin.template: src=runroot.conf.j2 dest=/etc/kojid/plugins/runroot.conf
|
||||||
when: "'runroot' in group_names"
|
when: "'runroot' in group_names"
|
||||||
notify:
|
notify:
|
||||||
- restart kojid
|
- restart kojid
|
||||||
|
@ -219,7 +219,7 @@
|
||||||
|
|
||||||
# oz.cfg upstream ram and cpu definitions are not enough
|
# oz.cfg upstream ram and cpu definitions are not enough
|
||||||
- name: Oz.cfg
|
- name: Oz.cfg
|
||||||
template: src=oz.cfg.j2 dest=/etc/oz/oz.cfg
|
ansible.builtin.template: src=oz.cfg.j2 dest=/etc/oz/oz.cfg
|
||||||
tags:
|
tags:
|
||||||
- koji_builder
|
- koji_builder
|
||||||
- koji_builder/oz.cfg
|
- koji_builder/oz.cfg
|
||||||
|
@ -278,7 +278,7 @@
|
||||||
- koji_builder
|
- koji_builder
|
||||||
|
|
||||||
- name: Mock site-defaults.cfg
|
- name: Mock site-defaults.cfg
|
||||||
template: src=builders/site-defaults.cfg dest=/etc/mock/site-defaults.cfg mode=0644 owner=root group=mock
|
ansible.builtin.template: src=builders/site-defaults.cfg dest=/etc/mock/site-defaults.cfg mode=0644 owner=root group=mock
|
||||||
when: not inventory_hostname.startswith(('bkernel'))
|
when: not inventory_hostname.startswith(('bkernel'))
|
||||||
tags:
|
tags:
|
||||||
- koji_builder
|
- koji_builder
|
||||||
|
@ -382,13 +382,13 @@
|
||||||
- koji_builder/oomd
|
- koji_builder/oomd
|
||||||
|
|
||||||
- name: Install script to update osbuild api ip in the firewall
|
- name: Install script to update osbuild api ip in the firewall
|
||||||
template: src=osbuildapi-update.sh dest=/usr/local/bin/osbuildapi-update.sh mode=755
|
ansible.builtin.template: src=osbuildapi-update.sh dest=/usr/local/bin/osbuildapi-update.sh mode=755
|
||||||
tags:
|
tags:
|
||||||
- koji_builder
|
- koji_builder
|
||||||
- koji_builder/osbuildapi
|
- koji_builder/osbuildapi
|
||||||
|
|
||||||
- name: Install cron job to run osbuild api ip update script every minute.
|
- name: Install cron job to run osbuild api ip update script every minute.
|
||||||
template: src=osbuildapi-update.cron dest=/etc/cron.d/osbuildapi-update.cron mode=644
|
ansible.builtin.template: src=osbuildapi-update.cron dest=/etc/cron.d/osbuildapi-update.cron mode=644
|
||||||
tags:
|
tags:
|
||||||
- koji_builder
|
- koji_builder
|
||||||
- koji_builder/osbuildapi
|
- koji_builder/osbuildapi
|
||||||
|
@ -406,7 +406,7 @@
|
||||||
- koji_builder/nspawn
|
- koji_builder/nspawn
|
||||||
|
|
||||||
- name: Create override config for systemd-nspawn containers to allow coredumps
|
- name: Create override config for systemd-nspawn containers to allow coredumps
|
||||||
template: src=nspawn-override.conf dest=/etc/systemd/system/machine-.scope.d/80-infra.conf mode=0644
|
ansible.builtin.template: src=nspawn-override.conf dest=/etc/systemd/system/machine-.scope.d/80-infra.conf mode=0644
|
||||||
when: inventory_hostname.startswith(('buildhw-a64'))
|
when: inventory_hostname.startswith(('buildhw-a64'))
|
||||||
tags:
|
tags:
|
||||||
- koji_builder
|
- koji_builder
|
||||||
|
|
|
@ -47,7 +47,7 @@
|
||||||
- koji_hub
|
- koji_hub
|
||||||
|
|
||||||
- name: Fedmenu shim
|
- name: Fedmenu shim
|
||||||
template: src=fedmenu-extra-footer.html dest=/usr/share/koji-web/static/extra-footer.html
|
ansible.builtin.template: src=fedmenu-extra-footer.html dest=/usr/share/koji-web/static/extra-footer.html
|
||||||
tags: koji_hub
|
tags: koji_hub
|
||||||
notify: reload httpd
|
notify: reload httpd
|
||||||
# XXX - we only want to do this in staging for now because it requires a patch
|
# XXX - we only want to do this in staging for now because it requires a patch
|
||||||
|
@ -65,7 +65,7 @@
|
||||||
- koji_hub
|
- koji_hub
|
||||||
|
|
||||||
- name: Hub config
|
- name: Hub config
|
||||||
template: src=hub.conf.j2 dest=/etc/koji-hub/hub.conf owner=apache group=apache mode=600
|
ansible.builtin.template: src=hub.conf.j2 dest=/etc/koji-hub/hub.conf owner=apache group=apache mode=600
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- koji_hub
|
- koji_hub
|
||||||
|
@ -73,7 +73,7 @@
|
||||||
notify: reload httpd
|
notify: reload httpd
|
||||||
|
|
||||||
- name: Kojiweb config
|
- name: Kojiweb config
|
||||||
template: src=web.conf.j2 dest=/etc/kojiweb/web.conf owner=apache group=apache mode=600
|
ansible.builtin.template: src=web.conf.j2 dest=/etc/kojiweb/web.conf owner=apache group=apache mode=600
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- koji_hub
|
- koji_hub
|
||||||
|
@ -110,7 +110,7 @@
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
||||||
- name: Install the configuration file for fedora-messaging
|
- name: Install the configuration file for fedora-messaging
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src=fedora-messaging.toml
|
src=fedora-messaging.toml
|
||||||
dest=/etc/fedora-messaging/config.toml
|
dest=/etc/fedora-messaging/config.toml
|
||||||
tags:
|
tags:
|
||||||
|
@ -281,7 +281,7 @@
|
||||||
notify: reload httpd
|
notify: reload httpd
|
||||||
|
|
||||||
- name: Koji web hub specific config files
|
- name: Koji web hub specific config files
|
||||||
template: src={{ item }}.j2 dest=/etc/httpd/conf.d/{{ item }} owner=root group=root
|
ansible.builtin.template: src={{ item }}.j2 dest=/etc/httpd/conf.d/{{ item }} owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- kojiweb.conf
|
- kojiweb.conf
|
||||||
- kojihub.conf
|
- kojihub.conf
|
||||||
|
@ -313,7 +313,7 @@
|
||||||
- kojira
|
- kojira
|
||||||
|
|
||||||
- name: Kojira config
|
- name: Kojira config
|
||||||
template: src=kojira.conf.j2 dest=/etc/kojira/kojira.conf
|
ansible.builtin.template: src=kojira.conf.j2 dest=/etc/kojira/kojira.conf
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- koji_hub
|
- koji_hub
|
||||||
|
@ -406,12 +406,12 @@
|
||||||
when: ansible_hostname.startswith('koji02')
|
when: ansible_hostname.startswith('koji02')
|
||||||
|
|
||||||
- name: Install koji-gc.conf
|
- name: Install koji-gc.conf
|
||||||
template: src=koji-gc.conf.j2 dest=/etc/koji-gc/koji-gc.conf
|
ansible.builtin.template: src=koji-gc.conf.j2 dest=/etc/koji-gc/koji-gc.conf
|
||||||
tags:
|
tags:
|
||||||
- koji_hub
|
- koji_hub
|
||||||
|
|
||||||
- name: Install prune-signed-copies-protected-tags config for prunesigs
|
- name: Install prune-signed-copies-protected-tags config for prunesigs
|
||||||
template: src=prune-signed-copies-protected-tags.j2 dest=/etc/prune-signed-copies-protected-tags
|
ansible.builtin.template: src=prune-signed-copies-protected-tags.j2 dest=/etc/prune-signed-copies-protected-tags
|
||||||
tags:
|
tags:
|
||||||
- koji_hub
|
- koji_hub
|
||||||
|
|
||||||
|
|
|
@ -14,7 +14,7 @@
|
||||||
- kojipkgs
|
- kojipkgs
|
||||||
|
|
||||||
- name: Install apache config templates for local apache
|
- name: Install apache config templates for local apache
|
||||||
template: src={{ item }} dest=/etc/httpd/conf.d/{{ item }} owner=root group=root mode=644
|
ansible.builtin.template: src={{ item }} dest=/etc/httpd/conf.d/{{ item }} owner=root group=root mode=644
|
||||||
with_items:
|
with_items:
|
||||||
- kojipkgs.conf
|
- kojipkgs.conf
|
||||||
notify:
|
notify:
|
||||||
|
|
|
@ -141,7 +141,7 @@
|
||||||
- certbot_addhost is defined
|
- certbot_addhost is defined
|
||||||
|
|
||||||
- name: Install certificate bundle
|
- name: Install certificate bundle
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
dest=/etc/pki/tls/certs/{{site_name}}.bundle.cert
|
dest=/etc/pki/tls/certs/{{site_name}}.bundle.cert
|
||||||
src=combined.j2
|
src=combined.j2
|
||||||
owner=root
|
owner=root
|
||||||
|
|
|
@ -26,7 +26,7 @@
|
||||||
- log_detective_backup
|
- log_detective_backup
|
||||||
|
|
||||||
- name: Install the backup script
|
- name: Install the backup script
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: backup.sh.j2
|
src: backup.sh.j2
|
||||||
dest: "{{ ld_backup_script }}"
|
dest: "{{ ld_backup_script }}"
|
||||||
mode: '0755'
|
mode: '0755'
|
||||||
|
|
|
@ -48,7 +48,7 @@
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
||||||
- name: Install fedora-messaging config
|
- name: Install fedora-messaging config
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: fedora-messaging.toml.j2
|
src: fedora-messaging.toml.j2
|
||||||
dest: /etc/fedora-messaging/config.toml
|
dest: /etc/fedora-messaging/config.toml
|
||||||
owner: countme
|
owner: countme
|
||||||
|
|
|
@ -41,7 +41,7 @@
|
||||||
check_implicit_admin: true
|
check_implicit_admin: true
|
||||||
|
|
||||||
- name: Create .my.cnf file for future logins
|
- name: Create .my.cnf file for future logins
|
||||||
template: src=dotmy.cnf.j2 dest=/root/.my.cnf owner=root group=root mode=0700
|
ansible.builtin.template: src=dotmy.cnf.j2 dest=/root/.my.cnf owner=root group=root mode=0700
|
||||||
|
|
||||||
- name: Ensure mariadb has a place to backup to
|
- name: Ensure mariadb has a place to backup to
|
||||||
ansible.builtin.file: dest=/backups state=directory owner=mysql
|
ansible.builtin.file: dest=/backups state=directory owner=mysql
|
||||||
|
@ -54,7 +54,7 @@
|
||||||
- mariadb-server
|
- mariadb-server
|
||||||
|
|
||||||
- name: Set up some cronjobs to backup databases as configured
|
- name: Set up some cronjobs to backup databases as configured
|
||||||
template: >
|
ansible.builtin.template: >
|
||||||
src=cron-backup-database
|
src=cron-backup-database
|
||||||
dest=/etc/cron.d/cron-backup-database-{{ item }}
|
dest=/etc/cron.d/cron-backup-database-{{ item }}
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -121,7 +121,7 @@
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
||||||
- name: Install fedora-messaging config
|
- name: Install fedora-messaging config
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "fedora-messaging.toml"
|
src: "fedora-messaging.toml"
|
||||||
dest: /etc/fedora-messaging/config.toml
|
dest: /etc/fedora-messaging/config.toml
|
||||||
owner: root
|
owner: root
|
||||||
|
@ -160,14 +160,14 @@
|
||||||
# - mediawiki
|
# - mediawiki
|
||||||
|
|
||||||
- name: Install localsettings
|
- name: Install localsettings
|
||||||
template: src=LocalSettings.php.{{wikiname}}.j2 dest=/srv/web/{{wikiname}}-wiki/LocalSettings.php owner=apache group=apache mode=600 setype=httpd_sys_content_t
|
ansible.builtin.template: src=LocalSettings.php.{{wikiname}}.j2 dest=/srv/web/{{wikiname}}-wiki/LocalSettings.php owner=apache group=apache mode=600 setype=httpd_sys_content_t
|
||||||
notify: reload httpd
|
notify: reload httpd
|
||||||
tags:
|
tags:
|
||||||
- mediawiki
|
- mediawiki
|
||||||
- localsettings
|
- localsettings
|
||||||
|
|
||||||
- name: Httpd conf
|
- name: Httpd conf
|
||||||
template: src=mediawiki-app.conf.j2 dest=/etc/httpd/conf.d/{{wikiname}}.conf
|
ansible.builtin.template: src=mediawiki-app.conf.j2 dest=/etc/httpd/conf.d/{{wikiname}}.conf
|
||||||
notify: reload httpd
|
notify: reload httpd
|
||||||
tags:
|
tags:
|
||||||
- mediawiki
|
- mediawiki
|
||||||
|
|
|
@ -6,7 +6,7 @@
|
||||||
- memcached
|
- memcached
|
||||||
|
|
||||||
- name: Setup memcached sysconfig
|
- name: Setup memcached sysconfig
|
||||||
template: src=memcached dest=/etc/sysconfig/memcached mode=644
|
ansible.builtin.template: src=memcached dest=/etc/sysconfig/memcached mode=644
|
||||||
notify:
|
notify:
|
||||||
- restart memcached
|
- restart memcached
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -43,8 +43,8 @@
|
||||||
tags:
|
tags:
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
||||||
- name: "Install the toml configuration file"
|
- name: "install the toml configuration file"
|
||||||
template: src="messaging.toml.j2" dest="/etc/fedora-messaging/{{ item.username }}.toml"
|
ansible.builtin.template: src="messaging.toml.j2" dest="/etc/fedora-messaging/{{ item.username }}.toml"
|
||||||
owner=root group=root mode=644
|
owner=root group=root mode=644
|
||||||
vars:
|
vars:
|
||||||
- msg_username: "{{ item.username }}"
|
- msg_username: "{{ item.username }}"
|
||||||
|
|
|
@ -67,7 +67,7 @@
|
||||||
- fedora-messaging
|
- fedora-messaging
|
||||||
|
|
||||||
- name: Setup mirror_pagure_ansible fedora-messaging config
|
- name: Setup mirror_pagure_ansible fedora-messaging config
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: mirror_pagure_ansible.cfg
|
src: mirror_pagure_ansible.cfg
|
||||||
dest: /etc/fedora-messaging/mirror_pagure_ansible.toml
|
dest: /etc/fedora-messaging/mirror_pagure_ansible.toml
|
||||||
owner: mirror_pagure_ansible
|
owner: mirror_pagure_ansible
|
||||||
|
@ -92,7 +92,7 @@
|
||||||
- mirror_pagure_ansible
|
- mirror_pagure_ansible
|
||||||
|
|
||||||
- name: Install the consumer
|
- name: Install the consumer
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: mirror_from_pagure_bus.py
|
src: mirror_from_pagure_bus.py
|
||||||
dest: /usr/local/libexec/mirror_pagure_ansible/mirror_from_pagure_bus.py
|
dest: /usr/local/libexec/mirror_pagure_ansible/mirror_from_pagure_bus.py
|
||||||
tags:
|
tags:
|
||||||
|
@ -103,7 +103,7 @@
|
||||||
# Install and start the service
|
# Install and start the service
|
||||||
|
|
||||||
- name: Install the dedicated service file for mirror_pagure_ansible
|
- name: Install the dedicated service file for mirror_pagure_ansible
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: mirror_pagure_ansible.service
|
src: mirror_pagure_ansible.service
|
||||||
dest: /etc/systemd/system/mirror_pagure_ansible.service
|
dest: /etc/systemd/system/mirror_pagure_ansible.service
|
||||||
owner: root
|
owner: root
|
||||||
|
|
|
@ -96,7 +96,7 @@
|
||||||
# We deploy two service files. Both listen on a different port, so that we can switch
|
# We deploy two service files. Both listen on a different port, so that we can switch
|
||||||
# them out as part of the protobuf cache deployment without having any local downtime.
|
# them out as part of the protobuf cache deployment without having any local downtime.
|
||||||
- name: Deploy service files
|
- name: Deploy service files
|
||||||
template: src=mirrorlist.service.j2 dest=/etc/systemd/system/mirrorlist{{ item }}.service
|
ansible.builtin.template: src=mirrorlist.service.j2 dest=/etc/systemd/system/mirrorlist{{ item }}.service
|
||||||
with_items:
|
with_items:
|
||||||
- 1
|
- 1
|
||||||
- 2
|
- 2
|
||||||
|
|
|
@ -50,7 +50,7 @@
|
||||||
- mote
|
- mote
|
||||||
|
|
||||||
- name: Replace the mote configuration file by the one with the normal user
|
- name: Replace the mote configuration file by the one with the normal user
|
||||||
template: src={{ item.file }}
|
ansible.builtin.template: src={{ item.file }}
|
||||||
dest="{{ item.location }}/{{ item.file }}"
|
dest="{{ item.location }}/{{ item.file }}"
|
||||||
owner=apache group=apache mode=0600
|
owner=apache group=apache mode=0600
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -123,7 +123,7 @@
|
||||||
|
|
||||||
# Set up our base config.
|
# Set up our base config.
|
||||||
- name: /etc/nagios/nrpe.cfg
|
- name: /etc/nagios/nrpe.cfg
|
||||||
template: src=nrpe.cfg.j2 dest=/etc/nagios/nrpe.cfg
|
ansible.builtin.template: src=nrpe.cfg.j2 dest=/etc/nagios/nrpe.cfg
|
||||||
when: not inventory_hostname.startswith('noc0')
|
when: not inventory_hostname.startswith('noc0')
|
||||||
notify:
|
notify:
|
||||||
- restart nrpe
|
- restart nrpe
|
||||||
|
@ -136,7 +136,7 @@
|
||||||
# So when adding or modifying them change the .j2 version in git.
|
# So when adding or modifying them change the .j2 version in git.
|
||||||
#
|
#
|
||||||
- name: Install nrpe client configs
|
- name: Install nrpe client configs
|
||||||
template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
ansible.builtin.template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
- check_raid.cfg
|
- check_raid.cfg
|
||||||
- check_ipa.cfg
|
- check_ipa.cfg
|
||||||
|
@ -176,7 +176,7 @@
|
||||||
# So when adding or modifying them change the .j2 version in git.
|
# So when adding or modifying them change the .j2 version in git.
|
||||||
#
|
#
|
||||||
- name: Install nrpe openvpn check config
|
- name: Install nrpe openvpn check config
|
||||||
template: src=check_openvpn_link.cfg.j2 dest=/etc/nrpe.d/check_openvpn_link.cfg owner=root group=root mode=0644
|
ansible.builtin.template: src=check_openvpn_link.cfg.j2 dest=/etc/nrpe.d/check_openvpn_link.cfg owner=root group=root mode=0644
|
||||||
when: vpn == true
|
when: vpn == true
|
||||||
notify:
|
notify:
|
||||||
- restart nrpe
|
- restart nrpe
|
||||||
|
@ -187,7 +187,7 @@
|
||||||
# So when adding or modifying them change the .j2 version in git.
|
# So when adding or modifying them change the .j2 version in git.
|
||||||
#
|
#
|
||||||
- name: Install nrpe merged log check script on log01
|
- name: Install nrpe merged log check script on log01
|
||||||
template: src=check_merged_file_age.cfg.j2 dest=/etc/nrpe.d/check_merged_file_age.cfg owner=root group=root mode=0644
|
ansible.builtin.template: src=check_merged_file_age.cfg.j2 dest=/etc/nrpe.d/check_merged_file_age.cfg owner=root group=root mode=0644
|
||||||
when: inventory_hostname.startswith('log0')
|
when: inventory_hostname.startswith('log0')
|
||||||
notify:
|
notify:
|
||||||
- restart nrpe
|
- restart nrpe
|
||||||
|
@ -198,7 +198,7 @@
|
||||||
# So when adding or modifying them change the .j2 version in git.
|
# So when adding or modifying them change the .j2 version in git.
|
||||||
#
|
#
|
||||||
- name: Install nrpe check_mysql config for mariadb servers
|
- name: Install nrpe check_mysql config for mariadb servers
|
||||||
template: src=check_mysql.cfg.j2 dest=/etc/nrpe.d/check_mysql.cfg owner=root group=root mode=0644
|
ansible.builtin.template: src=check_mysql.cfg.j2 dest=/etc/nrpe.d/check_mysql.cfg owner=root group=root mode=0644
|
||||||
when: inventory_hostname.startswith('db03')
|
when: inventory_hostname.startswith('db03')
|
||||||
notify:
|
notify:
|
||||||
- restart nrpe
|
- restart nrpe
|
||||||
|
@ -206,7 +206,7 @@
|
||||||
- nagios_client
|
- nagios_client
|
||||||
|
|
||||||
- name: Install nrpe checks for mailman01
|
- name: Install nrpe checks for mailman01
|
||||||
template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
ansible.builtin.template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
- check_mailman_api.cfg
|
- check_mailman_api.cfg
|
||||||
when: inventory_hostname.startswith('mailman01')
|
when: inventory_hostname.startswith('mailman01')
|
||||||
|
@ -216,7 +216,7 @@
|
||||||
- nagios_client
|
- nagios_client
|
||||||
|
|
||||||
- name: Install nrpe checks for proxies
|
- name: Install nrpe checks for proxies
|
||||||
template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
ansible.builtin.template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
- check_happroxy_conns.cfg
|
- check_happroxy_conns.cfg
|
||||||
- check_varnish_proc.cfg
|
- check_varnish_proc.cfg
|
||||||
|
@ -227,7 +227,7 @@
|
||||||
- nagios_client
|
- nagios_client
|
||||||
|
|
||||||
- name: Install nrpe checks for sigul_bridge
|
- name: Install nrpe checks for sigul_bridge
|
||||||
template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
ansible.builtin.template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
- check_sigul_bridge_proc.cfg
|
- check_sigul_bridge_proc.cfg
|
||||||
when: inventory_hostname.startswith('sign-bridge')
|
when: inventory_hostname.startswith('sign-bridge')
|
||||||
|
@ -237,7 +237,7 @@
|
||||||
- nagios_client
|
- nagios_client
|
||||||
|
|
||||||
- name: Install nrpe checks for sundries/websites
|
- name: Install nrpe checks for sundries/websites
|
||||||
template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
ansible.builtin.template: src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
- check_websites_buildtime.cfg
|
- check_websites_buildtime.cfg
|
||||||
when: inventory_hostname.startswith('sundries')
|
when: inventory_hostname.startswith('sundries')
|
||||||
|
@ -252,7 +252,7 @@
|
||||||
- nagios_client
|
- nagios_client
|
||||||
block:
|
block:
|
||||||
- name: Install the nrpe template
|
- name: Install the nrpe template
|
||||||
template: src=check_crl_next_update.cfg.j2 dest=/etc/nrpe.d/check_crl_next_update.cfg owner=root group=root mode=0644
|
ansible.builtin.template: src=check_crl_next_update.cfg.j2 dest=/etc/nrpe.d/check_crl_next_update.cfg owner=root group=root mode=0644
|
||||||
notify:
|
notify:
|
||||||
- restart nrpe
|
- restart nrpe
|
||||||
|
|
||||||
|
@ -263,7 +263,7 @@
|
||||||
acl: default=no etype=user entity=nrpe permissions="r" name=/etc/openvpn/server/crl.pem state=present
|
acl: default=no etype=user entity=nrpe permissions="r" name=/etc/openvpn/server/crl.pem state=present
|
||||||
|
|
||||||
- name: Install nrpe config for the RabbitMQ checks
|
- name: Install nrpe config for the RabbitMQ checks
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "rabbitmq_args.ini.j2"
|
src: "rabbitmq_args.ini.j2"
|
||||||
dest: "/etc/nrpe.d/rabbitmq_args.ini"
|
dest: "/etc/nrpe.d/rabbitmq_args.ini"
|
||||||
owner: root
|
owner: root
|
||||||
|
@ -274,7 +274,7 @@
|
||||||
- nagios_client
|
- nagios_client
|
||||||
|
|
||||||
- name: Install nrpe checks for the RabbitMQ cluster
|
- name: Install nrpe checks for the RabbitMQ cluster
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src: "{{ item }}.j2"
|
src: "{{ item }}.j2"
|
||||||
dest: "/etc/nrpe.d/{{ item }}"
|
dest: "/etc/nrpe.d/{{ item }}"
|
||||||
owner: root
|
owner: root
|
||||||
|
@ -301,7 +301,7 @@
|
||||||
- nagios_client
|
- nagios_client
|
||||||
|
|
||||||
- name: Install nrpe check for rsyslogd
|
- name: Install nrpe check for rsyslogd
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
- check_rsyslogd_proc.cfg
|
- check_rsyslogd_proc.cfg
|
||||||
|
@ -311,7 +311,7 @@
|
||||||
- nagios_client
|
- nagios_client
|
||||||
|
|
||||||
- name: Install nrpe check for systemd units
|
- name: Install nrpe check for systemd units
|
||||||
template:
|
ansible.builtin.template:
|
||||||
src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
src={{ item }}.j2 dest=/etc/nrpe.d/{{ item }} owner=root group=root mode=0644
|
||||||
with_items:
|
with_items:
|
||||||
- check_systemd_units.cfg
|
- check_systemd_units.cfg
|
||||||
|
|
|
@ -326,7 +326,7 @@
|
||||||
# This one may go to being just a regular config file if we can make remote monitoring work
|
# This one may go to being just a regular config file if we can make remote monitoring work
|
||||||
## Copy over system configs
|
## Copy over system configs
|
||||||
- name: Copy specialized nrpe.cfg for nagios server
|
- name: Copy specialized nrpe.cfg for nagios server
|
||||||
template: src=nrpe/nrpe.cfg.j2 dest=/etc/nagios/nrpe.cfg
|
ansible.builtin.template: src=nrpe/nrpe.cfg.j2 dest=/etc/nagios/nrpe.cfg
|
||||||
notify:
|
notify:
|
||||||
- restart nrpe
|
- restart nrpe
|
||||||
tags:
|
tags:
|
||||||
|
@ -340,14 +340,14 @@
|
||||||
- nagios_server
|
- nagios_server
|
||||||
|
|
||||||
- name: Template out the nagios httpd conf
|
- name: Template out the nagios httpd conf
|
||||||
template: src=httpd/{{item}}.j2 dest=/etc/httpd/conf.d/{{item}}
|
ansible.builtin.template: src=httpd/{{item}}.j2 dest=/etc/httpd/conf.d/{{item}}
|
||||||
with_items:
|
with_items:
|
||||||
- nagios.conf
|
- nagios.conf
|
||||||
tags:
|
tags:
|
||||||
- nagios_server
|
- nagios_server
|
||||||
|
|
||||||
- name: Template out the nagios httpd conf
|
- name: Template out the nagios httpd conf
|
||||||
template: src=httpd/{{item}}.j2 dest=/etc/httpd/conf.d/{{item}}
|
ansible.builtin.template: src=httpd/{{item}}.j2 dest=/etc/httpd/conf.d/{{item}}
|
||||||
with_items:
|
with_items:
|
||||||
- 0_nagios-external.conf
|
- 0_nagios-external.conf
|
||||||
tags:
|
tags:
|
||||||
|
@ -356,21 +356,21 @@
|
||||||
when: env == "production" and nagios_location == "external"
|
when: env == "production" and nagios_location == "external"
|
||||||
|
|
||||||
- name: Template out the cgi.cfg
|
- name: Template out the cgi.cfg
|
||||||
template: src=nagios/configs/cgi.cfg.j2 dest=/etc/nagios/cgi.cfg mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/configs/cgi.cfg.j2 dest=/etc/nagios/cgi.cfg mode=0644 owner=root group=root
|
||||||
tags:
|
tags:
|
||||||
- nagios_server
|
- nagios_server
|
||||||
- nagios_config
|
- nagios_config
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Override config.inc.php for the given environment
|
- name: Override config.inc.php for the given environment
|
||||||
template: src=nagios/config.inc.php.j2 dest=/usr/share/nagios/html/config.inc.php mode=0640 owner=root group=apache
|
ansible.builtin.template: src=nagios/config.inc.php.j2 dest=/usr/share/nagios/html/config.inc.php mode=0640 owner=root group=apache
|
||||||
tags:
|
tags:
|
||||||
- nagios_server
|
- nagios_server
|
||||||
- nagios_config
|
- nagios_config
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Template over plugins
|
- name: Template over plugins
|
||||||
template: src=nagios/plugins/{{item}}.j2 dest=/usr/lib64/nagios/plugins/{{item}} mode=0755 owner=root group=root
|
ansible.builtin.template: src=nagios/plugins/{{item}}.j2 dest=/usr/lib64/nagios/plugins/{{item}} mode=0755 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- check_koji
|
- check_koji
|
||||||
tags:
|
tags:
|
||||||
|
@ -378,7 +378,7 @@
|
||||||
|
|
||||||
|
|
||||||
- name: Template over commands
|
- name: Template over commands
|
||||||
template: src=nagios/commands/{{item}}.j2 dest=/etc/nagios/commands/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/commands/{{item}}.j2 dest=/etc/nagios/commands/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- postgres.cfg
|
- postgres.cfg
|
||||||
tags:
|
tags:
|
||||||
|
@ -387,7 +387,7 @@
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Template over services (internal)
|
- name: Template over services (internal)
|
||||||
template: src=nagios/services/{{item}}.j2 dest=/etc/nagios/services/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/services/{{item}}.j2 dest=/etc/nagios/services/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- ipa.cfg
|
- ipa.cfg
|
||||||
- mirrorlist-proxies.cfg
|
- mirrorlist-proxies.cfg
|
||||||
|
@ -398,7 +398,7 @@
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Template over services (both)
|
- name: Template over services (both)
|
||||||
template: src=nagios/services/{{item}}.j2 dest=/etc/nagios/services/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/services/{{item}}.j2 dest=/etc/nagios/services/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- websites.cfg
|
- websites.cfg
|
||||||
when: env == "production"
|
when: env == "production"
|
||||||
|
@ -409,7 +409,7 @@
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Build out nagios host templates (production)
|
- name: Build out nagios host templates (production)
|
||||||
template: src=nagios/hosts/{{item}}.j2 dest=/etc/nagios/hosts/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/hosts/{{item}}.j2 dest=/etc/nagios/hosts/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- dedicatedsolutions-hosts.cfg
|
- dedicatedsolutions-hosts.cfg
|
||||||
- host1plus-hosts.cfg
|
- host1plus-hosts.cfg
|
||||||
|
@ -431,7 +431,7 @@
|
||||||
|
|
||||||
## These are only available to the internal server
|
## These are only available to the internal server
|
||||||
- name: Build out nagios host templates (production)
|
- name: Build out nagios host templates (production)
|
||||||
template: src=nagios/hosts/{{item}}.j2 dest=/etc/nagios/hosts/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/hosts/{{item}}.j2 dest=/etc/nagios/hosts/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- iad2-hosts.cfg
|
- iad2-hosts.cfg
|
||||||
- iad2-mgmt-hosts.cfg
|
- iad2-mgmt-hosts.cfg
|
||||||
|
@ -444,7 +444,7 @@
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Copy Matrix-Notify script
|
- name: Copy Matrix-Notify script
|
||||||
template: src=nagios/scripts/matrix-notify.sh.j2 dest=/usr/local/bin/matrix-notify.sh mode=0750 owner=root group=nagios
|
ansible.builtin.template: src=nagios/scripts/matrix-notify.sh.j2 dest=/usr/local/bin/matrix-notify.sh mode=0750 owner=root group=nagios
|
||||||
tags:
|
tags:
|
||||||
- nagios_config
|
- nagios_config
|
||||||
- nagios_server
|
- nagios_server
|
||||||
|
@ -452,7 +452,7 @@
|
||||||
|
|
||||||
## These are only available to the internal server
|
## These are only available to the internal server
|
||||||
- name: Build out nagios host templates (production)
|
- name: Build out nagios host templates (production)
|
||||||
template: src=nagios/hosts/{{item}}.j2 dest=/etc/nagios/hosts/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/hosts/{{item}}.j2 dest=/etc/nagios/hosts/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- iad2-hosts.cfg
|
- iad2-hosts.cfg
|
||||||
when: env == "production" and nagios_location == 'iad2_internal'
|
when: env == "production" and nagios_location == 'iad2_internal'
|
||||||
|
@ -463,7 +463,7 @@
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Build out nagios host templates (production)
|
- name: Build out nagios host templates (production)
|
||||||
template: src=nagios/hosts/{{item}}.j2 dest=/etc/nagios/hosts/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/hosts/{{item}}.j2 dest=/etc/nagios/hosts/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- iad2-external.cfg
|
- iad2-external.cfg
|
||||||
- ibiblio-hosts-ipv6.cfg
|
- ibiblio-hosts-ipv6.cfg
|
||||||
|
@ -474,7 +474,7 @@
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Build out nagios hostgroup templates (iad2)
|
- name: Build out nagios hostgroup templates (iad2)
|
||||||
template: src=nagios/hostgroups/{{item}}.j2 dest=/etc/nagios/hostgroups/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/hostgroups/{{item}}.j2 dest=/etc/nagios/hostgroups/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- all.cfg
|
- all.cfg
|
||||||
- vpnclients.cfg
|
- vpnclients.cfg
|
||||||
|
@ -490,7 +490,7 @@
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Build out nagios hostgroup templates (external)
|
- name: Build out nagios hostgroup templates (external)
|
||||||
template: src=nagios/hostgroups/{{item}}.j2 dest=/etc/nagios/hostgroups/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/hostgroups/{{item}}.j2 dest=/etc/nagios/hostgroups/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- all-external.cfg
|
- all-external.cfg
|
||||||
when: nagios_location == "external"
|
when: nagios_location == "external"
|
||||||
|
@ -501,7 +501,7 @@
|
||||||
notify: restart nagios
|
notify: restart nagios
|
||||||
|
|
||||||
- name: Build out nagios services templates
|
- name: Build out nagios services templates
|
||||||
template: src=nagios/services/{{item}}.j2 dest=/etc/nagios/services/{{item}} mode=0644 owner=root group=root
|
ansible.builtin.template: src=nagios/services/{{item}}.j2 dest=/etc/nagios/services/{{item}} mode=0644 owner=root group=root
|
||||||
with_items:
|
with_items:
|
||||||
- iad2-mgmt.cfg
|
- iad2-mgmt.cfg
|
||||||
when: nagios_location == 'iad2_internal'
|
when: nagios_location == 'iad2_internal'
|
||||||
|
|
Some files were not shown because too many files have changed in this diff Show more
Loading…
Add table
Add a link
Reference in a new issue