ansible/main.yml
Kevin Fenzi ddfd50de03 smtp-auth-cc-rdu01: create new smtp auth relay
We need this to try and relay in emails.
It turns out to be bordering on impossible to do this sanely with our
current setup, so make a fedora vm that lets us use saslauthdb to have a
specific (small) list of users that can authenticate and relay emails
via bastion and out. We can't do this on rhel, because they don't build
the saslauthdb backend. We can't use any of the other backends because
they either don't work or would allow any fedora user to relay, which we
do not want.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-18 14:35:49 -07:00

100 lines
6 KiB
YAML

---
##
## This is the master playbook. It includes all the other playbooks.
## Usually you would call it with a -t tagname to only run a specific tag
## over all machines.
##
## some common ones:
## -t fedmsgconfig -> runs fedmsg/base config over all playbooks
## -t apache -> run when tasks/apache.yml changes.
##
##
##
## group playbooks
##
- import_playbook: /srv/web/infra/ansible/playbooks/groups/backup-server.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/badges-backend.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/badges-web.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/bastion.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/batcave.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/bodhi-backend.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/buildhw.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/buildvm.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/busgateway.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/certgetter.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/copr-backend.yml
#- import_playbook: /srv/web/infra/ansible/playbooks/groups/copr-db.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/copr-dist-git.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/copr-frontend.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/copr-hypervisor.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/copr-keygen.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/copr-pulp.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/debuginfod.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/dns.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/download.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/fedimg.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/github2fedmsg.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/ipa.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/ipsilon.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/kerneltest.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/koji-hub.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/kojipkgs.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/logserver.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/mailman.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/maintainer-test.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/mariadb-server.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/mbs.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/memcached.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/mirrormanager.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/nfs-servers.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/noc.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/notifs-backend.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/notifs-web.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/nuancier.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/oci-registry.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/odcs.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/openqa-workers.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/openqa.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/osbs/deploy-cluster.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/osbs/configure-osbs.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/pagure.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/pdc.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/people.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/pkgs.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/postgresql-server.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/proxies.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/rabbitmq.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/releng-compose.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/retrace.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/secondary.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/sign-bridge.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/smtp-mm.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/smtp-auth.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/sundries.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/tang.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/torrent.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/unbound.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/value.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/virthost.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/wiki.yml
####
#
# Openshift apps
#
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/bodhi.yml
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/fas.yml
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/greenwave.yml
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/ipsilon.yml
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/koschei.yml
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/release-monitoring.yml
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/the-new-hotness.yml
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/transtats.yml
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/waiverdb.yml
# These need work to finish and complete and are all stg currently.
#- import_playbook: /srv/web/infra/ansible/playbooks/openshift-apps/rats.yml
#
# host playbooks
#
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/cloud-noc01.fedorainfracloud.org.yml