ansible/playbooks/groups/bastion.yml

41 lines
1 KiB
YAML

- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=bastion"
- name: make the boxen be real for real
hosts: bastion
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- base
- rkhunter
- nagios_client
- hosts
- fas_client
- sudo
- collectd/base
- { role: openvpn/server, when: not inventory_hostname.startswith('bastion-comm01') }
- { role: packager_alias, when: not inventory_hostname.startswith('bastion-comm01') }
tasks:
- include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml"
- include: "{{ tasks }}/motd.yml"
handlers:
- include: "{{ handlers }}/restart_services.yml"
- name: configure bastion-qa
hosts: bastion-comm01.qa.fedoraproject.org
user: root
gather_facts: True
tasks:
- name: install needed packages
yum: pkg={{ item }} state=present
with_items:
- ipmitool