Bart Sjerps
124 lines
3.0 KiB
YAML
124 lines
3.0 KiB
YAML
---
|
|
- name: Sync Configuration Files
|
|
hosts: rhel
|
|
become: yes
|
|
vars:
|
|
worker_limit: 1024 # Global variable used in the template
|
|
|
|
tasks:
|
|
- name: Root password
|
|
ansible.builtin.import_tasks: tasks/rootpass.yml
|
|
|
|
- name: Create Directories
|
|
file:
|
|
path: '{{ item.directory }}'
|
|
state: directory
|
|
mode: "{{ item.mode | default('0755') }}"
|
|
owner: root
|
|
group: root
|
|
loop:
|
|
- { directory: "/var/backups" }
|
|
- { directory: "/opt/atclab/bin" }
|
|
- { directory: "/var/user", mode: "1777" }
|
|
|
|
- name: Copy etc configs
|
|
copy:
|
|
src: '{{ item.src }}'
|
|
dest: '{{ item.dest }}'
|
|
owner: root
|
|
group: root
|
|
mode: "{{ item.mode | default('0644') }}"
|
|
loop:
|
|
- { src: templates/users.autofs, dest: /etc/auto.master.d/users.autofs }
|
|
- { src: templates/auto.users, dest: /etc/auto.users }
|
|
- { src: templates/sssd.conf, dest: /etc/sssd/conf.d/sssd.conf, mode: '0600' }
|
|
|
|
# - name: Deploy sssd.conf
|
|
# template:
|
|
# src: templates/sssd.conf
|
|
# dest: /etc/sssd/conf.d/sssd.conf
|
|
# owner: root
|
|
# group: root
|
|
# mode: '0600'
|
|
# notify: Restart sssd # This triggers the handler only if the file changes
|
|
|
|
- name: Deploy ldap.conf
|
|
template:
|
|
src: templates/ldap.conf
|
|
dest: /etc/openldap/ldap.conf
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
|
|
- name: Deploy sshd.conf
|
|
template:
|
|
src: templates/sshd.conf
|
|
dest: /etc/ssh/sshd_config.d/60_lab.conf
|
|
owner: root
|
|
group: root
|
|
mode: '0600'
|
|
|
|
- name: Deploy ssh.conf
|
|
template:
|
|
src: templates/ssh.conf
|
|
dest: /etc/ssh/ssh_config.d/60_lab.conf
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
|
|
- name: Deploy sudoers
|
|
template:
|
|
src: templates/lab-sudo
|
|
dest: /etc/sudoers.d/sudogroup
|
|
owner: root
|
|
group: root
|
|
mode: '0440'
|
|
|
|
- name: Deploy gitconfig
|
|
template:
|
|
src: templates/gitconfig
|
|
dest: /etc/gitconfig
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
|
|
- name: Copy profile configs
|
|
copy:
|
|
src: etc/profile.d/
|
|
dest: /etc/profile.d/
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
|
|
- name: Copy etc configs
|
|
copy:
|
|
src: '{{ item.src }}'
|
|
dest: '{{ item.dest }}'
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
loop:
|
|
- { src: templates/users.autofs, dest: /etc/auto.master.d/users.autofs }
|
|
- { src: templates/auto.users, dest: /etc/auto.users }
|
|
|
|
- name: Copy bin scripts
|
|
copy:
|
|
src: bin/
|
|
dest: /opt/atclab/bin
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: Enable AutoFS
|
|
ansible.builtin.systemd:
|
|
name: autofs
|
|
state: started
|
|
enabled: yes
|
|
|
|
handlers:
|
|
- name: Restart sssd
|
|
service:
|
|
name: sssd
|
|
state: restarted
|
|
|