New ansible_header, more specific. See group_vars/all/vars.yaml

certbot_on_virtu
_pollion 2020-04-16 17:56:54 +02:00
parent b31c42b9d4
commit 4af63a2be5
89 changed files with 97 additions and 88 deletions

View File

@ -10,7 +10,7 @@ retry_files_enabled = False
inventory = ./hosts
# Custom header in templates
ansible_managed = Ansible managed, see https://gitlab.crans.org/nounous/ansible
# ansible_managed = Ansible managed, see https://gitlab.crans.org/nounous/ansible
# Do not use cows (with cowsay)
nocows = 1

View File

@ -0,0 +1,9 @@
dirty: "{{lookup('pipe', 'git diff --quiet || echo dirty')}}"
ansible_header: |
+++++++++++++++++++++++++++++++++++++++++++++++++++
Ansible managed, don't modify the file locally.
See https://gitlab.crans.org/nounous/ansible.
Run by: {{ ansible_env.SUDO_USER }}
Latest commit: {% if dirty %}({{dirty}}) {% endif %}{{ lookup('pipe', 'git rev-parse HEAD') }}
{% set _, rpath = template_path.split('roles/') %}Template: roles/{{ rpath }}
+++++++++++++++++++++++++++++++++++++++++++++++++++

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> Ansible a été déployé sur cette machine. Voir /var/local/ansible/.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
{% if not bind.master %}
{% for zone in bind.zones %}

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
d /var/run/screen 0755 root utmp

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Mises à jour de sécurité
deb {{ debian_mirror }}-security {{ ansible_lsb.codename }}/updates {{ debian_components }}

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
0 0 * * * www-data /usr/local/django/cas/manage.py clearsessions
*/5 * * * * www-data /usr/local/django/cas/manage.py cas_clean_tickets
5 0 * * * www-data /usr/local/django/cas/manage.py cas_clean_sessions

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> django-cas-server a été déployé sur cette machine. Voir /usr/local/django/cas.

View File

@ -1,4 +1,4 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> framadate a été déployé sur cette machine.
Voir {{ framadate_path }}

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
{% for i in ftpsync %}
{{ i.cron_time }} * * * mirror ftpsync sync:archive:{{ i.name }}
{% endfor %}

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
MIRRORNAME="CRANS"
TO="{{ item.dest }}"

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> ftpsync a été déployé sur cette machine. Voir /etc/ftpsync/.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# To troubleshoot and get more log info enable ldap debug logging in grafana.ini
# [log]
# filters = ldap:debug

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> grafana a été déployé sur cette machine. Voir /etc/grafana/.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
[Unit]
Description=Mount home-adh on zbee
Wants=network-online.target

View File

@ -1,5 +1,5 @@
# dhcpd.conf
# {{ ansible_managed }}
{{ ansible_header | comment }}
# option definitions common to all supported networks...
#option domain-name "example.org";

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
global_defs {
notification_email {

View File

@ -1,3 +1,3 @@
#!/bin/sh
# {{ ansible_managed }}
{{ ansible_header | comment }}
echo "Pour changer votre mot de passe,\nAllez sur l'intranet : {{intranet_url}}"

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# The user and group nslcd should run as.
uid nslcd

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
[commit]
latest_commit_hash: {{ git_version.stdout }}

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
/var/log/firewall/trace.log
/var/log/firewall/filtre.log

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
#$ModLoad imklog #Déjà présent dans rsyslog.conf
# Messages du firewall (ie de sa génération)

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Set to 1 to start Mtail at boot.
ENABLED=1

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Copyright 2011 Google Inc. All Rights Reserved.
# This file is available under the Apache license.

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> mtail a été déployé sur cette machine. Voir /etc/mtail/.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
#Mumudvb init config file
#
# This file is used to specify the locations of mumudvb config files for each card

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
/home /etc/auto.master.d/home-adh.sh -t600

View File

@ -1,3 +1,3 @@
#!/bin/sh
# {{ ansible_managed }}
{{ ansible_header | comment }}
exec echo "-fstype=nfs,nosuid nfs.adm.crans.org:/home-adh/$1"

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
#
# Sample auto.master file
# This is a 'master' automounter map and it has the following format:

View File

@ -1,6 +1,6 @@
#
# Init system options
# {{ ansible_managed }}
{{ ansible_header | comment }}
#
# If the kernel supports using the autofs miscellanous device
# and you wish to use it you must set this configuration option

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# If you do not set values for the NEED_ options, they will be attempted
# autodetected; this should be sufficient for most people. Valid alternatives
# for the NEED_ options are "yes" and "no".

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
server {
listen 80;
listen [::]:80;

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> NGINX a été déployé sur cette machine. Voir /etc/nginx/.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
[Unit]
Description=NinjaBot WebHook server
After=network.target ninjabot.service

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
[Unit]
Description=NinjaBot IRC bot
After=network.target

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> NinjaBot a été déployé sur cette machine. Voir /var/local/ninjabot/.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help
driftfile /var/lib/ntp/ntp.drift

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
/home-owncloud /etc/auto.master.d/home-owncloud.sh -t60

View File

@ -1,5 +1,5 @@
#!/bin/bash
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Certains user dans owncloud ont été créés sous la forme user_1234 ce qui faisait planter le autofs
# ceci est un fix

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
#
# Sample auto.master file
# This is a 'master' automounter map and it has the following format:

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
*/15 * * * * root /bin/ls -l /home-owncloud/ 2>/dev/null | /bin/grep d????????? | /usr/bin/awk '{print $7}' | /usr/bin/xargs -I '@LOGIN@' /bin/umount /home-owncloud/@LOGIN@

View File

@ -1,6 +1,6 @@
#
# Init system options
# {{ ansible_managed }}
{{ ansible_header | comment }}
#
# If the kernel supports using the autofs miscellanous device
# and you wish to use it you must set this configuration option

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
*/15 * * * * www-data /usr/bin/php /var/www/owncloud/occ system:cron > /dev/null 2>&1

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
upstream php-handler {
server unix:/var/run/php/php7.3-fpm.sock;

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> OwnCloud a été déployé sur cette machine. Voir /var/www/owncloud/.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Fichier fournissant des méthodes pour traduire certaines adresses
/^(.*)@localhost(\.crans\.org)?$/ ${1}@crans.org

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Fichier de configuration principal de postfix.
# +------------------+

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
# {{ ansible_header }}
# Fichier de configuration des démons de postfix.
# +------------------------+

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Filtrage des fichiers envoyes en piece jointe.
# La version hard (s'il n'y a pas d'antivirus, ou pour le dernier virus a la mode)

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
127.0.0.1 permit
138.231.0.0/16 permit

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Transport des mails
{% if postfix.mailman %}

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# See https://prometheus.io/docs/alerting/configuration/ for documentation.
global:

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# TODOlist :
# - Faire fonctionner le monitoring des switchs défini ici
# * Configurer tous les switchs avec un compte SNMPv3

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
{# As this is also Jinja2 it will conflict without a raw block #}
{# Depending of Prometheus Node exporter version, rules can change depending of version #}
{% raw %}

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
{# As this is also Jinja2 it will conflict without a raw block #}
{% raw %}
groups:

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
global:
# scrape_interval is set to the global default (60s)

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> prometheus a été déployé sur cette machine. Voir /etc/prometheus/.

View File

@ -1,4 +1,4 @@
! {{ ansible_managed }}
! {{ ansible_header | comment }}
router bgp {{ bgp.as }}
no synchronization

View File

@ -1,4 +1,4 @@
! {{ ansible_managed }}
! {{ ansible_header | comment }}
hostname zebra
password {{ zebra.password }}

View File

@ -1,4 +1,4 @@
! {{ ansible_managed }}
! {{ ansible_header | comment }}
router bgp {{ bgp.as }}
no synchronization

View File

@ -1,4 +1,4 @@
! {{ ansible_managed }}
! {{ ansible_header | comment }}
hostname zebra
password {{ zebra.password }}

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# 2 .. 10 = lower priorities
# Read /usr/share/doc/quagga/README.Debian for details.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
# {{ ansible_header }}
#
# If this option is set the /etc/init.d/quagga script automatically loads
# the config via "vtysh -b" when the servers are started.

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
* * * * * root /usr/bin/python3 /var/local/re2o-services/dhcp/main.py

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
*/2 * * * * root /usr/bin/python3 /var/local/re2o-services/dns/main.py

View File

@ -1,5 +1,5 @@
# -*- mode: python; coding: utf-8 -*-
# {{ ansible_managed }}
{{ ansible_header | comment }}
### Give me a role

View File

@ -1,5 +1,5 @@
# -*- mode: python; coding: utf-8 -*-
# {{ ansible_managed }}
{{ ansible_header | comment }}
### Give me a role

View File

@ -1,5 +1,5 @@
# -*- mode: python; coding: utf-8 -*-
# {{ ansible_managed }}
{{ ansible_header | comment }}
### Give me a role

View File

@ -1,5 +1,5 @@
# -*- mode: python; coding: utf-8 -*-
# {{ ansible_managed }}
{{ ansible_header | comment }}
### Give me a role

View File

@ -1,5 +1,5 @@
# -*- mode: python; coding: utf-8 -*-
# {{ ansible_managed }}
{{ ansible_header | comment }}
### Give me a role

View File

@ -1,3 +1,3 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
*/2 * * * * root /usr/bin/python3 /var/local/re2o-services/firewall/main.py
@reboot root /usr/bin/python3 /var/local/re2o-services/firewall/main.py --force

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
*/2 * * * * root /usr/bin/python3 /var/local/re2o-services/home/main.py

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
*/5 * * * * root /usr/bin/python3 /var/local/re2o-services/mail-server/main.py

View File

@ -1,2 +1,2 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
@hourly root /usr/bin/python3 /var/local/re2o-services/notif-users/main.py

View File

@ -1,4 +1,4 @@
; {{ ansible_managed }}
; {{ ansible_header | comment }}
[Re2o]
hostname = {{ re2o.server }}
username = {{ re2o.service_user }}

View File

@ -1,5 +1,5 @@
# -*- mode: python; coding: utf-8 -*-
# {{ ansible_managed }}
{{ ansible_header | comment }}
from __future__ import unicode_literals

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> Re2o a été déployé sur cette machine. Voir /var/www/re2o/.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# GLOBAL OPTIONS
log file=/var/log/rsyncd

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
{% for i in rsync_mirror %}
{{ i.cron_time }} * * * mirror rsync --times --links --hard-links --partial --block-size=8192 --recursive --exclude *-dvd-* --exclude source/ --verbose --stats --delete-after rsync://{{ i.rsync_host }}/{{ i.rsync_path }} {{ i.dest }} | tee -a "/var/log/mirror/{{ i.name }}.log" > /dev/null
{% endfor %}

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> rsync-mirror a été déployé sur cette machine. Voir /etc/cron.d/rsync-mirror.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
$ModLoad omrelp
$WorkDirectory /var/log/spool # default location for work (spool) files

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Change prompt
Defaults passprompt_override
Defaults passprompt="[sudo] mot de passe pour %p sur %h: "

View File

@ -1,3 +1,3 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
# Group privilege specification
%nounou ALL=(ALL:ALL) ALL

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
#
# See the man page for details on how to write a sudoers file.
#

View File

@ -1,3 +1,3 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> Le contrôleur Unifi a été déployé sur cette machine.

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
Package: *
Pin: release a=unstable

View File

@ -1,4 +1,4 @@
#!/usr/bin/tail +3
# {{ ansible_managed }}
{{ ansible_header | comment }}
> wireguard a été déployé sur cette machine.
Voir /etc/wireguard/

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
{% if wireguard.sputnik %}
[Interface]
Address = 172.31.0.2/30, fd0c:700:0:8::2/64

View File

@ -1,4 +1,4 @@
# {{ ansible_managed }}
{{ ansible_header | comment }}
[Unit]
Description=Mount /home-adh/{{ item }}
After=iscsi.service iscsid.service lvm2-activation-early.service multipathd.service