ansible/playbooks/groups/bastion.yml

- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
  vars:
    myhosts: "bastion"

- name: make the boxen be real for real
  hosts: bastion
  user: root
  gather_facts: True

  vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"
   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  roles:
  - base
  - rkhunter
  - { role: openvpn/client, when: inventory_hostname == 'bastion13.fedoraproject.org' }
  - openvpn/server
  - ipa/client
  - nagios_client
  - hosts
  - sudo
  - collectd/base
  - packager_alias
  - opendkim
  - fasjson

  pre_tasks:
  - import_tasks: "{{ tasks_path }}/yumrepos.yml"

  tasks:
  - import_tasks: "{{ tasks_path }}/motd.yml"

  handlers:
  - import_tasks: "{{ handlers_path }}/restart_services.yml"
ansible 2.14 tweak for bastion playbook Signed-off-by: Kevin Fenzi <kevin@scrye.com> 2023-05-17 18:14:05 -07:00			`- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"`
			`vars:`
updating playbooks to work with ansible 2.14 2023-05-18 15:28:34 -04:00			`myhosts: "bastion"`
A basic first cut at a bastion role. Going to use on bastion02 2014-10-08 22:37:24 +00:00
			`- name: make the boxen be real for real`
Switch bastion-comm01.qa to ansible 2015-04-30 23:00:34 +00:00			`hosts: bastion`
A basic first cut at a bastion role. Going to use on bastion02 2014-10-08 22:37:24 +00:00			`user: root`
			`gather_facts: True`

			`vars_files:`
			`- /srv/web/infra/ansible/vars/global.yml`
New ansible doesn't like expanding {{ private }} in the same list of vars files it's defined in. 2015-01-09 22:59:18 +00:00			`- "/srv/private/ansible/vars.yml"`
A basic first cut at a bastion role. Going to use on bastion02 2014-10-08 22:37:24 +00:00			`- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml`

			`roles:`
			`- base`
			`- rkhunter`
bastion: bastion13 has to have vpn to enroll in ipa Signed-off-by: Kevin Fenzi <kevin@scrye.com> 2021-05-05 15:39:18 -07:00			`- { role: openvpn/client, when: inventory_hostname == 'bastion13.fedoraproject.org' }`
bastion: move openvpn server role before nagios_client that requires a /etc/openvpn/server/ccd dir Signed-off-by: Kevin Fenzi <kevin@scrye.com> 2021-05-05 15:01:58 -07:00			`- openvpn/server`
bastion: move ipa client after vpn We need vpn to reach the ipa servers. Instead lets try and fix this by not specifying the group in nagios/client. Signed-off-by: Kevin Fenzi <kevin@scrye.com> 2021-05-05 15:22:57 -07:00			`- ipa/client`
and this is how you break everything before going on a week vacation 2017-05-05 22:12:33 +00:00			`- nagios_client`
A basic first cut at a bastion role. Going to use on bastion02 2014-10-08 22:37:24 +00:00			`- hosts`
			`- sudo`
			`- collectd/base`
bastion: clean up logic so server will install on bastion01.iad2 Signed-off-by: Kevin Fenzi <kevin@scrye.com> 2020-06-11 15:31:54 -07:00			`- packager_alias`
add opendkim role for bastion 2017-02-14 19:33:55 +00:00			`- opendkim`
bastion: add fasjon role to bastion Signed-off-by: Kevin Fenzi <kevin@scrye.com> 2021-03-25 13:28:09 -07:00			`- fasjson`
A basic first cut at a bastion role. Going to use on bastion02 2014-10-08 22:37:24 +00:00
fix all playbooks so that yumrepos is a pre_task 2018-10-30 18:28:26 +00:00			`pre_tasks:`
switch all the include tasks to import tasks 2017-10-17 17:37:03 +00:00			`- import_tasks: "{{ tasks_path }}/yumrepos.yml"`
fix all playbooks so that yumrepos is a pre_task 2018-10-30 18:28:26 +00:00
			`tasks:`
switch all the include tasks to import tasks 2017-10-17 17:37:03 +00:00			`- import_tasks: "{{ tasks_path }}/motd.yml"`
A basic first cut at a bastion role. Going to use on bastion02 2014-10-08 22:37:24 +00:00
			`handlers:`
typo on a massive scale 2017-10-15 20:33:11 +00:00			`- import_tasks: "{{ handlers_path }}/restart_services.yml"`
and now we can rebuild bastion-comm.qa bwahahahaha 2015-04-30 23:05:06 +00:00