ansible/playbooks/groups/keyserver.yml

38 lines
1,011 B
YAML

# create a new sks keyserver
# NOTE: should be used with --limit most of the time
# NOTE: make sure there is room/space for this server on the vmhost
# NOTE: most of these vars_path come from group_vars/gallery-web* or from hostvars
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=keys"
- name: make the box be real
hosts: keys
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- base
- rkhunter
- { role: denyhosts, when: ansible_distribution_major_version|int != 7 }
- nagios_client
- hosts
- fas_client
- sudo
- collectd/base
- { role: openvpn/client,
when: env != "staging" }
- apache
- keyserver
tasks:
- include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml"
- include: "{{ tasks }}/motd.yml"
handlers:
- include: "{{ handlers }}/restart_services.yml"