From 3eebad51dc744c8d065f621d1f97603438339c1b Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Wed, 31 Mar 2021 22:16:12 +0000
Subject: [PATCH] Add zoneminder to zm hosts

---
 playbooks/zm.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/playbooks/zm.yml b/playbooks/zm.yml
index 427911a..7330603 100644
--- a/playbooks/zm.yml
+++ b/playbooks/zm.yml
@@ -22,3 +22,25 @@
 
   roles:
     - base
+    - mod_auth_gssapi
+    - role: kerberos/keytab
+      keytab: /etc/httpd/httpd.keytab
+      principals: HTTP/zm.foo.sh@FOO.SH
+      group: apache
+    - zoneminder
+
+  tasks:
+    - name: require authentication for munin web
+      copy:
+        dest: /etc/httpd/conf.local.d/zoneminder-auth.conf
+        content: |
+          <Location /zm>
+            AuthType        GSSAPI
+            GssapiBasicAuth Off
+            AuthName        "Password Required"
+            Require         valid-user
+          </Location>
+        mode: 0644
+        owner: root
+        group: "{{ ansible_wheel }}"
+      notify: restart apache