44 lines
1.2 KiB
YAML
44 lines
1.2 KiB
YAML
# create a new proxy server
|
|
|
|
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=os_proxies"
|
|
|
|
- name: make the box be real
|
|
hosts: os_proxies
|
|
user: root
|
|
gather_facts: True
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
|
|
pre_tasks:
|
|
- include_vars: dir=/srv/web/infra/ansible/vars/all/ ignore_files=README
|
|
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
|
|
|
|
roles:
|
|
- base
|
|
- { role: ipa/client, when: env == "staging" }
|
|
- { role: fas_client, when: env != "staging" }
|
|
- rkhunter
|
|
- nagios_client
|
|
- collectd/base
|
|
- sudo
|
|
- keepalived
|
|
|
|
tasks:
|
|
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
|
|
- import_tasks: "{{ tasks_path }}/motd.yml"
|
|
|
|
- name: install haproxy
|
|
package: name=haproxy state=present
|
|
|
|
- name: install haproxy config
|
|
copy: src="{{ files }}/communishift/haproxy.cfg" dest=/etc/haproxy/haproxy.cfg
|
|
|
|
- name: Turn on certain selinux booleans so haproxy can bind to ports
|
|
seboolean: name=haproxy_connect_any state=true persistent=true
|
|
|
|
handlers:
|
|
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|
|
|