Merge branch 'nettoyage-de-printemps' into 'newinfra'
Nettoyage de printemps See merge request nounous/ansible!197certbot_on_virtu
						commit
						9c55443f90
					
				| 
						 | 
				
			
			@ -1,52 +0,0 @@
 | 
			
		|||
---
 | 
			
		||||
- name: Install ansible
 | 
			
		||||
  apt:
 | 
			
		||||
    update_cache: true
 | 
			
		||||
    name:
 | 
			
		||||
      - ansible
 | 
			
		||||
  register: apt_result
 | 
			
		||||
  retries: 3
 | 
			
		||||
  until: apt_result is succeeded
 | 
			
		||||
 | 
			
		||||
- name: Create ansible directory
 | 
			
		||||
  file:
 | 
			
		||||
    path: /var/local/ansible
 | 
			
		||||
    state: directory
 | 
			
		||||
    mode: '2775'
 | 
			
		||||
    owner: root
 | 
			
		||||
    group: nounou
 | 
			
		||||
 | 
			
		||||
- name: Set ACL for ansible directory
 | 
			
		||||
  acl:
 | 
			
		||||
    path: /var/local/ansible
 | 
			
		||||
    default: true
 | 
			
		||||
    entity: nounou
 | 
			
		||||
    etype: group
 | 
			
		||||
    permissions: rwx
 | 
			
		||||
    state: query
 | 
			
		||||
 | 
			
		||||
- name: Clone Ansible project
 | 
			
		||||
  git:
 | 
			
		||||
    repo: 'http://gitlab.adm.crans.org/nounous/ansible.git'
 | 
			
		||||
    dest: /var/local/ansible
 | 
			
		||||
    umask: '002'
 | 
			
		||||
    version: 'master'
 | 
			
		||||
 | 
			
		||||
- name: Indicate Ansible in motd
 | 
			
		||||
  template:
 | 
			
		||||
    src: update-motd.d/05-service.j2
 | 
			
		||||
    dest: /etc/update-motd.d/05-ansible
 | 
			
		||||
    mode: 0755
 | 
			
		||||
 | 
			
		||||
- name: Enable automatic removal of stale sockets
 | 
			
		||||
  lineinfile:
 | 
			
		||||
    dest: /etc/ssh/sshd_config
 | 
			
		||||
    regexp: ^StreamLocalBindUnlink
 | 
			
		||||
    line: "StreamLocalBindUnlink yes # Enable automatic removal of stale sockets"
 | 
			
		||||
    state: absent
 | 
			
		||||
 | 
			
		||||
- name: Restart sshd
 | 
			
		||||
  systemd:
 | 
			
		||||
    enabled: true
 | 
			
		||||
    state: restarted
 | 
			
		||||
    name: sshd
 | 
			
		||||
| 
						 | 
				
			
			@ -1,3 +0,0 @@
 | 
			
		|||
#!/usr/bin/tail +14
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mAnsible[0m a été déployé sur cette machine. Voir [38;5;6m/var/local/ansible/[0m.
 | 
			
		||||
| 
						 | 
				
			
			@ -1,20 +0,0 @@
 | 
			
		|||
---
 | 
			
		||||
- name: Install backuppc
 | 
			
		||||
  apt:
 | 
			
		||||
    update_cache: true
 | 
			
		||||
    name: backuppc
 | 
			
		||||
  register: apt_result
 | 
			
		||||
  retries: 3
 | 
			
		||||
  until: apt_result is succeeded
 | 
			
		||||
 | 
			
		||||
- name: Disable mlocate indexation of backup files
 | 
			
		||||
  lineinfile:
 | 
			
		||||
    path: /etc/updatedb.conf
 | 
			
		||||
    regexp: '^PRUNEPATHS'
 | 
			
		||||
    line: PRUNEPATHS="/tmp /var/spool /media /var/lib/os-prober /var/lib/ceph /var/lib/backuppc /backup"
 | 
			
		||||
 | 
			
		||||
- name: Indicate role in motd
 | 
			
		||||
  template:
 | 
			
		||||
    src: update-motd.d/05-service.j2
 | 
			
		||||
    dest: /etc/update-motd.d/05-backuppc
 | 
			
		||||
    mode: 0755
 | 
			
		||||
| 
						 | 
				
			
			@ -1,3 +0,0 @@
 | 
			
		|||
#!/usr/bin/tail +14
 | 
			
		||||
{{ ansible_header | comment }}
 | 
			
		||||
[0m> [38;5;82mBackupPC[0m a été déployé sur cette machine. Voir [38;5;6m/etc/backuppc/[0m et [38;5;6m/var/lib/backuppc/[0m.
 | 
			
		||||
| 
						 | 
				
			
			@ -1,71 +0,0 @@
 | 
			
		|||
---
 | 
			
		||||
- name: Deploy /home systemd mounts
 | 
			
		||||
  template:
 | 
			
		||||
    src: "systemd/system/home.mount.j2"
 | 
			
		||||
    dest: "/etc/systemd/system/home\x2dadh-{{ item }}.mount"
 | 
			
		||||
    mode: 0644
 | 
			
		||||
  loop:
 | 
			
		||||
    - a
 | 
			
		||||
    - b
 | 
			
		||||
    - c
 | 
			
		||||
    - d
 | 
			
		||||
    - e
 | 
			
		||||
    - f
 | 
			
		||||
    - g
 | 
			
		||||
    - h
 | 
			
		||||
    - i
 | 
			
		||||
    - j
 | 
			
		||||
    - k
 | 
			
		||||
    - l
 | 
			
		||||
    - m
 | 
			
		||||
    - n
 | 
			
		||||
    - o
 | 
			
		||||
    - p
 | 
			
		||||
    - q
 | 
			
		||||
    - r
 | 
			
		||||
    - s
 | 
			
		||||
    - t
 | 
			
		||||
    - u
 | 
			
		||||
    - v
 | 
			
		||||
    - w
 | 
			
		||||
    - x
 | 
			
		||||
    - y
 | 
			
		||||
    - z
 | 
			
		||||
    - mail
 | 
			
		||||
    - logs
 | 
			
		||||
 | 
			
		||||
- name: Load and activate /home systemd mounts
 | 
			
		||||
  systemd:
 | 
			
		||||
    name: "home\x2dadh-{{ item }}.mount"
 | 
			
		||||
    daemon_reload: true
 | 
			
		||||
    enabled: true
 | 
			
		||||
    state: started
 | 
			
		||||
  loop:
 | 
			
		||||
    - a
 | 
			
		||||
    - b
 | 
			
		||||
    - c
 | 
			
		||||
    - d
 | 
			
		||||
    - e
 | 
			
		||||
    - f
 | 
			
		||||
    - g
 | 
			
		||||
    - h
 | 
			
		||||
    - i
 | 
			
		||||
    - j
 | 
			
		||||
    - k
 | 
			
		||||
    - l
 | 
			
		||||
    - m
 | 
			
		||||
    - n
 | 
			
		||||
    - o
 | 
			
		||||
    - p
 | 
			
		||||
    - q
 | 
			
		||||
    - r
 | 
			
		||||
    - s
 | 
			
		||||
    - t
 | 
			
		||||
    - u
 | 
			
		||||
    - v
 | 
			
		||||
    - w
 | 
			
		||||
    - x
 | 
			
		||||
    - y
 | 
			
		||||
    - z
 | 
			
		||||
    - mail
 | 
			
		||||
    - logs
 | 
			
		||||
| 
						 | 
				
			
			@ -1,13 +0,0 @@
 | 
			
		|||
{{ ansible_header | comment }}
 | 
			
		||||
[Unit]
 | 
			
		||||
Description=Mount /home-adh/{{ item }}
 | 
			
		||||
After=iscsi.service iscsid.service lvm2-activation-early.service multipathd.service
 | 
			
		||||
 | 
			
		||||
[Mount]
 | 
			
		||||
What=/dev/mapper/mpath-home-{{ item }}-part1
 | 
			
		||||
Where=/home-adh/{{ item }}
 | 
			
		||||
Type=ext4
 | 
			
		||||
Options=rw,usrjquota=aquota.user,jqfmt=vfsv1,nosuid,nodev,nofail
 | 
			
		||||
 | 
			
		||||
[Install]
 | 
			
		||||
WantedBy=multi-user.target
 | 
			
		||||
		Loading…
	
		Reference in New Issue