New ansible_header, more specific. See group_vars/all/vars.yaml
							parent
							
								
									b31c42b9d4
								
							
						
					
					
						commit
						4af63a2be5
					
				| 
						 | 
				
			
			@ -10,7 +10,7 @@ retry_files_enabled = False
 | 
			
		|||
inventory = ./hosts
 | 
			
		||||
 | 
			
		||||
# Custom header in templates
 | 
			
		||||
ansible_managed = Ansible managed, see https://gitlab.crans.org/nounous/ansible
 | 
			
		||||
# ansible_managed = Ansible managed, see https://gitlab.crans.org/nounous/ansible
 | 
			
		||||
 | 
			
		||||
# Do not use cows (with cowsay)
 | 
			
		||||
nocows = 1
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -0,0 +1,9 @@
 | 
			
		|||
dirty: "{{lookup('pipe', 'git diff --quiet || echo dirty')}}"
 | 
			
		||||
ansible_header: |
 | 
			
		||||
    +++++++++++++++++++++++++++++++++++++++++++++++++++
 | 
			
		||||
       Ansible managed, don't modify the file locally.
 | 
			
		||||
       See https://gitlab.crans.org/nounous/ansible.
 | 
			
		||||
       Run by: {{ ansible_env.SUDO_USER }}
 | 
			
		||||
       Latest commit: {% if dirty %}({{dirty}}) {% endif %}{{ lookup('pipe', 'git rev-parse HEAD') }}
 | 
			
		||||
       {% set _, rpath = template_path.split('roles/') %}Template: roles/{{ rpath }}
 | 
			
		||||
    +++++++++++++++++++++++++++++++++++++++++++++++++++
 | 
			
		||||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mAnsible[0m a été déployé sur cette machine. Voir [38;5;6m/var/local/ansible/[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
{% if not bind.master %}
 | 
			
		||||
{% for zone in bind.zones %}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
d /var/run/screen 0755 root utmp
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
# Mises à jour de sécurité
 | 
			
		||||
deb     {{ debian_mirror }}-security {{ ansible_lsb.codename }}/updates {{ debian_components }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
0   0  * * * www-data /usr/local/django/cas/manage.py clearsessions
 | 
			
		||||
*/5 *  * * * www-data /usr/local/django/cas/manage.py cas_clean_tickets
 | 
			
		||||
5   0  * * * www-data /usr/local/django/cas/manage.py cas_clean_sessions
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mdjango-cas-server[0m a été déployé sur cette machine. Voir [38;5;6m/usr/local/django/cas[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
> framadate a été déployé sur cette machine.
 | 
			
		||||
  Voir {{ framadate_path }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
{% for i in ftpsync %}
 | 
			
		||||
{{ i.cron_time }}  * * *   mirror ftpsync sync:archive:{{ i.name }}
 | 
			
		||||
{% endfor %}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
MIRRORNAME="CRANS"
 | 
			
		||||
TO="{{ item.dest }}"
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mftpsync[0m a été déployé sur cette machine. Voir [38;5;6m/etc/ftpsync/[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# To troubleshoot and get more log info enable ldap debug logging in grafana.ini
 | 
			
		||||
# [log]
 | 
			
		||||
# filters = ldap:debug
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mgrafana[0m a été déployé sur cette machine. Voir [38;5;6m/etc/grafana/[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[Unit]
 | 
			
		||||
Description=Mount home-adh on zbee
 | 
			
		||||
Wants=network-online.target
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
# dhcpd.conf
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
# option definitions common to all supported networks...
 | 
			
		||||
#option domain-name "example.org";
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
global_defs {
 | 
			
		||||
  notification_email {
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/bin/sh
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
echo "Pour changer votre mot de passe,\nAllez sur l'intranet : {{intranet_url}}"
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
# The user and group nslcd should run as.
 | 
			
		||||
uid nslcd
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
[commit]
 | 
			
		||||
latest_commit_hash: {{ git_version.stdout }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
/var/log/firewall/trace.log
 | 
			
		||||
/var/log/firewall/filtre.log
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
#$ModLoad imklog #Déjà présent dans rsyslog.conf
 | 
			
		||||
 | 
			
		||||
# Messages du firewall (ie de sa génération)
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# Set to 1 to start Mtail at boot.
 | 
			
		||||
ENABLED=1
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# Copyright 2011 Google Inc. All Rights Reserved.
 | 
			
		||||
# This file is available under the Apache license.
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mmtail[0m a été déployé sur cette machine. Voir [38;5;6m/etc/mtail/[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
#Mumudvb init config file
 | 
			
		||||
#
 | 
			
		||||
# This file is used to specify the locations of mumudvb config files for each card
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
/home /etc/auto.master.d/home-adh.sh -t600
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/bin/sh
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
exec echo "-fstype=nfs,nosuid nfs.adm.crans.org:/home-adh/$1"
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
#
 | 
			
		||||
# Sample auto.master file
 | 
			
		||||
# This is a 'master' automounter map and it has the following format:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,6 +1,6 @@
 | 
			
		|||
#
 | 
			
		||||
# Init system options
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
#
 | 
			
		||||
# If the kernel supports using the autofs miscellanous device
 | 
			
		||||
# and you wish to use it you must set this configuration option
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# If you do not set values for the NEED_ options, they will be attempted
 | 
			
		||||
# autodetected; this should be sufficient for most people. Valid alternatives
 | 
			
		||||
# for the NEED_ options are "yes" and "no".
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
server { 
 | 
			
		||||
    listen 80;
 | 
			
		||||
    listen [::]:80;
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mNGINX[0m a été déployé sur cette machine. Voir [38;5;6m/etc/nginx/[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[Unit]
 | 
			
		||||
Description=NinjaBot WebHook server
 | 
			
		||||
After=network.target ninjabot.service
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[Unit]
 | 
			
		||||
Description=NinjaBot IRC bot
 | 
			
		||||
After=network.target
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mNinjaBot[0m a été déployé sur cette machine. Voir [38;5;6m/var/local/ninjabot/[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help
 | 
			
		||||
 | 
			
		||||
driftfile /var/lib/ntp/ntp.drift
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
/home-owncloud /etc/auto.master.d/home-owncloud.sh -t60
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
#!/bin/bash
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
# Certains user dans owncloud ont été créés sous la forme user_1234 ce qui faisait planter le autofs
 | 
			
		||||
# ceci est un fix
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
#
 | 
			
		||||
# Sample auto.master file
 | 
			
		||||
# This is a 'master' automounter map and it has the following format:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
*/15 * * * * root /bin/ls -l /home-owncloud/ 2>/dev/null | /bin/grep d????????? | /usr/bin/awk '{print $7}' | /usr/bin/xargs -I '@LOGIN@' /bin/umount /home-owncloud/@LOGIN@
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,6 +1,6 @@
 | 
			
		|||
#
 | 
			
		||||
# Init system options
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
#
 | 
			
		||||
# If the kernel supports using the autofs miscellanous device
 | 
			
		||||
# and you wish to use it you must set this configuration option
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
*/15 * * * * www-data /usr/bin/php /var/www/owncloud/occ system:cron > /dev/null 2>&1
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
upstream php-handler {
 | 
			
		||||
    server unix:/var/run/php/php7.3-fpm.sock;
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mOwnCloud[0m a été déployé sur cette machine. Voir [38;5;6m/var/www/owncloud/[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# Fichier fournissant des méthodes pour traduire certaines adresses
 | 
			
		||||
 | 
			
		||||
/^(.*)@localhost(\.crans\.org)?$/   ${1}@crans.org
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# Fichier de configuration principal de postfix.
 | 
			
		||||
 | 
			
		||||
# +------------------+
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
# {{ ansible_header }}
 | 
			
		||||
# Fichier de configuration des démons de postfix.
 | 
			
		||||
 | 
			
		||||
# +------------------------+
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# Filtrage des fichiers envoyes en piece jointe.
 | 
			
		||||
 | 
			
		||||
# La version hard (s'il n'y a pas d'antivirus, ou pour le dernier virus a la mode)
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
127.0.0.1                                 permit
 | 
			
		||||
138.231.0.0/16                            permit
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# Transport des mails
 | 
			
		||||
 | 
			
		||||
{% if postfix.mailman %}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# See https://prometheus.io/docs/alerting/configuration/ for documentation.
 | 
			
		||||
 | 
			
		||||
global:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# TODOlist :
 | 
			
		||||
# - Faire fonctionner le monitoring des switchs défini ici
 | 
			
		||||
#   * Configurer tous les switchs avec un compte SNMPv3
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
{# As this is also Jinja2 it will conflict without a raw block #}
 | 
			
		||||
{# Depending of Prometheus Node exporter version, rules can change depending of version #}
 | 
			
		||||
{% raw %}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
{# As this is also Jinja2 it will conflict without a raw block #}
 | 
			
		||||
{% raw %}
 | 
			
		||||
groups:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
global:
 | 
			
		||||
  # scrape_interval is set to the global default (60s)
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mprometheus[0m a été déployé sur cette machine. Voir [38;5;6m/etc/prometheus/[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
! {{ ansible_managed }}
 | 
			
		||||
! {{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
router bgp {{ bgp.as }}
 | 
			
		||||
no synchronization
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
! {{ ansible_managed }}
 | 
			
		||||
! {{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
hostname zebra
 | 
			
		||||
password {{ zebra.password }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
! {{ ansible_managed }}
 | 
			
		||||
! {{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
router bgp {{ bgp.as }}
 | 
			
		||||
no synchronization
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
! {{ ansible_managed }}
 | 
			
		||||
! {{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
hostname zebra
 | 
			
		||||
password {{ zebra.password }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
#   2 .. 10  = lower priorities
 | 
			
		||||
# Read /usr/share/doc/quagga/README.Debian for details.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
# {{ ansible_header }}
 | 
			
		||||
#
 | 
			
		||||
# If this option is set the /etc/init.d/quagga script automatically loads
 | 
			
		||||
# the config via "vtysh -b" when the servers are started.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
* * * * * root /usr/bin/python3 /var/local/re2o-services/dhcp/main.py
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
*/2 * * * * root /usr/bin/python3 /var/local/re2o-services/dns/main.py
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
# -*- mode: python; coding: utf-8 -*-
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
### Give me a role
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
# -*- mode: python; coding: utf-8 -*-
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
### Give me a role
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
# -*- mode: python; coding: utf-8 -*-
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
### Give me a role
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
# -*- mode: python; coding: utf-8 -*-
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
### Give me a role
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
# -*- mode: python; coding: utf-8 -*-
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
### Give me a role
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
*/2 * * * * root /usr/bin/python3 /var/local/re2o-services/firewall/main.py
 | 
			
		||||
@reboot root /usr/bin/python3 /var/local/re2o-services/firewall/main.py --force
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
*/2 * * * * root /usr/bin/python3 /var/local/re2o-services/home/main.py
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
*/5 * * * * root /usr/bin/python3 /var/local/re2o-services/mail-server/main.py
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,2 +1,2 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
@hourly root /usr/bin/python3 /var/local/re2o-services/notif-users/main.py
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
; {{ ansible_managed }}
 | 
			
		||||
; {{ ansible_header | comment }}
 | 
			
		||||
[Re2o]
 | 
			
		||||
hostname = {{ re2o.server }}
 | 
			
		||||
username = {{ re2o.service_user }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
# -*- mode: python; coding: utf-8 -*-
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
from __future__ import unicode_literals
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mRe2o[0m a été déployé sur cette machine. Voir [38;5;6m/var/www/re2o/[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
# GLOBAL OPTIONS
 | 
			
		||||
log file=/var/log/rsyncd
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
{% for i in rsync_mirror %}
 | 
			
		||||
{{ i.cron_time }}  * * *   mirror rsync --times --links --hard-links --partial --block-size=8192 --recursive --exclude *-dvd-* --exclude source/ --verbose --stats --delete-after rsync://{{ i.rsync_host }}/{{ i.rsync_path }} {{ i.dest }} | tee -a "/var/log/mirror/{{ i.name }}.log" > /dev/null
 | 
			
		||||
{% endfor %}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mrsync-mirror[0m a été déployé sur cette machine. Voir [38;5;6m/etc/cron.d/rsync-mirror[0m.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
$ModLoad omrelp
 | 
			
		||||
$WorkDirectory /var/log/spool  # default location for work (spool) files
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# Change prompt
 | 
			
		||||
Defaults        passprompt_override
 | 
			
		||||
Defaults        passprompt="[sudo] mot de passe pour %p sur %h: "
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
# Group privilege specification
 | 
			
		||||
%nounou    ALL=(ALL:ALL) ALL
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
#
 | 
			
		||||
# See the man page for details on how to write a sudoers file.
 | 
			
		||||
#
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,3 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
> Le contrôleur Unifi a été déployé sur cette machine.
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
 | 
			
		||||
Package: *
 | 
			
		||||
Pin: release a=unstable
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
#!/usr/bin/tail +3
 | 
			
		||||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
> wireguard a été déployé sur cette machine.
 | 
			
		||||
  Voir /etc/wireguard/
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
{% if wireguard.sputnik %}
 | 
			
		||||
[Interface]
 | 
			
		||||
Address = 172.31.0.2/30, fd0c:700:0:8::2/64
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,4 +1,4 @@
 | 
			
		|||
# {{ ansible_managed }}
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[Unit]
 | 
			
		||||
Description=Mount /home-adh/{{ item }}
 | 
			
		||||
After=iscsi.service iscsid.service lvm2-activation-early.service multipathd.service
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
		Reference in New Issue