diff --git a/playbooks/groups/paste.yml b/playbooks/groups/paste.yml index a4ea52971e..61b63d1243 100644 --- a/playbooks/groups/paste.yml +++ b/playbooks/groups/paste.yml @@ -34,7 +34,7 @@ - nagios_client - fas_client - paste - + - rsyncd tasks: - include: "{{ tasks }}/hosts.yml" diff --git a/roles/rsyncd/README b/roles/rsyncd/README new file mode 100644 index 0000000000..f91678ffcd --- /dev/null +++ b/roles/rsyncd/README @@ -0,0 +1,3 @@ +This role is for servers that have httpd access and error logs +that we wish to sync to log02 to be able to review and backup. + diff --git a/roles/rsyncd/files/rsync b/roles/rsyncd/files/rsync new file mode 100644 index 0000000000..b5219fb3bc --- /dev/null +++ b/roles/rsyncd/files/rsync @@ -0,0 +1,14 @@ +# default: off +# description: The rsync server is a good addition to an ftp server, as it \ +# allows crc checksumming etc. +service rsync +{ + disable = no + socket_type = stream + wait = no + user = root + server = /usr/bin/rsync + server_args = --daemon + log_on_failure += USERID +} + diff --git a/roles/rsyncd/files/rsyncd.conf b/roles/rsyncd/files/rsyncd.conf new file mode 100644 index 0000000000..8e8ac27318 --- /dev/null +++ b/roles/rsyncd/files/rsyncd.conf @@ -0,0 +1,16 @@ +pid file = /var/run/rsyncd.pid +syslog facility = daemon +dont compress = *.gz *.tgz *.zip *.z *.rpm *.deb *.bz2 *.iso +use chroot = false +transfer logging = false +exclude = .snapshot/ .~tmp~/ /.private/ /.private/** **/.nfs* + + +# For distributing applications +[log] +comment = Server Logs +path = /var/log +uid = root +gid = root +read only = yes +hosts allow = 10.5.126.29 192.168.1.56 diff --git a/roles/rsyncd/tasks/main.yml b/roles/rsyncd/tasks/main.yml new file mode 100644 index 0000000000..fa8d04725c --- /dev/null +++ b/roles/rsyncd/tasks/main.yml @@ -0,0 +1,38 @@ +--- +# +# This role sets up rsyncd on a server +# + +- name: install rsync + yum: state=installed name=rsync + tags: + - packages + +- name: rsyncd.conf file + copy: src={{ item }} dest=/etc/rsyncd.conf mode=644 + with_first_found: + - "{{ rsyncd.conf }}" + - rsyncd.conf.{{ ansible_fqdn }} + - rsyncd.conf.{{ host_group }} + - rsyncd.conf.default + notify: + - restart xinetd + tags: + - config + +- name: xinetd rsync file + copy: src={{ item }} dest=/etc/xinetd.d/rsync mode=644 + with_first_found: + - "{{ rsync }}" + - rsync.{{ ansible_fqdn }} + - rsync.{{ host_group }} + - rsync.default + notify: + - restart xinetd + tags: + - config + +- name: make sure rsync is enabled in xinetd + service: name=rsync state=started + tags: + - services