mariadb: ansible-lint fixes

This commit is contained in:
Timo Makinen 2022-10-29 17:51:31 +00:00
parent 6d9d89da71
commit 41fe5a3892
2 changed files with 40 additions and 40 deletions

View file

@ -1,5 +1,5 @@
--- ---
- name: restart mariadb - name: Restart mariadb
service: ansible.builtin.service:
name: mariadb name: mariadb
state: restarted state: restarted

View file

@ -1,19 +1,19 @@
--- ---
- name: install packages - name: Install packages
package: ansible.builtin.package:
name: "{{ item }}" name: "{{ item }}"
state: installed state: installed
with_items: with_items:
- mariadb-server - mariadb-server
- python3-PyMySQL - python3-PyMySQL
- name: fix selinux contexts from data directory - name: Fix SELinux contexts from data directory
sefcontext: community.general.sefcontext:
path: "/export/mariadb(/.*)?" path: "/export/mariadb(/.*)?"
setype: mysqld_db_t setype: mysqld_db_t
- name: create data directory - name: Create data directory
file: ansible.builtin.file:
path: /export/mariadb path: /export/mariadb
state: directory state: directory
mode: 0750 mode: 0750
@ -21,8 +21,8 @@
group: mysql group: mysql
setype: _default setype: _default
- name: link data diretory - name: Link data diretory
file: ansible.builtin.file:
dest: /srv/mariadb dest: /srv/mariadb
src: /export/mariadb src: /export/mariadb
state: link state: link
@ -30,54 +30,54 @@
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
follow: false follow: false
- name: configure data directory - name: Configure data directory
lineinfile: ansible.builtin.lineinfile:
path: /etc/my.cnf.d/mariadb-server.cnf path: /etc/my.cnf.d/mariadb-server.cnf
regexp: "^datadir=.*" regexp: "^datadir=.*"
line: datadir=/srv/mariadb line: datadir=/srv/mariadb
notify: restart mariadb notify: Restart mariadb
- name: create additional config directory - name: Create additional config directory
file: ansible.builtin.file:
path: /etc/mysql path: /etc/mysql
state: directory state: directory
mode: 0750 mode: 0750
owner: root owner: root
group: mysql group: mysql
- name: allow mysql user to read private key - name: Allow mysql user to read private key
user: ansible.builtin.user:
name: mysql name: mysql
groups: hostkey groups: hostkey
append: true append: true
notify: restart mariadb notify: Restart mariadb
- name: create tls configuration - name: Create TLS configuration
template: ansible.builtin.template:
dest: /etc/my.cnf.d/tls.cnf dest: /etc/my.cnf.d/tls.cnf
src: tls.cnf.j2 src: tls.cnf.j2
mode: 0644 mode: 0644
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
notify: restart mariadb notify: Restart mariadb
- name: create local configuration - name: Create local configuration
copy: ansible.builtin.copy:
dest: /etc/my.cnf.d/local.cnf dest: /etc/my.cnf.d/local.cnf
content: "[mariadb]\ninnodb_file_per_table=ON\n" content: "[mariadb]\ninnodb_file_per_table=ON\n"
mode: 0644 mode: 0644
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
notify: restart mariadb notify: Restart mariadb
- name: enable service - name: Enable service
service: ansible.builtin.service:
name: mariadb name: mariadb
state: started state: started
enabled: true enabled: true
- name: set root password - name: Set root password
mysql_user: community.mysql.mysql_user:
name: root name: root
password: "{{ mariadb_root_password }}" password: "{{ mariadb_root_password }}"
login_user: root login_user: root
@ -87,8 +87,8 @@
no_log: true no_log: true
when: mariadb_root_password is defined when: mariadb_root_password is defined
- name: create root .my.cnf - name: Create root .my.cnf
template: ansible.builtin.template:
dest: /root/.my.cnf dest: /root/.my.cnf
src: my.cnf.j2 src: my.cnf.j2
mode: 0600 mode: 0600
@ -96,24 +96,24 @@
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
when: mariadb_root_password is defined when: mariadb_root_password is defined
- name: import sftpuser role - name: Import sftpuser role
import_role: ansible.builtin.import_role:
name: sftpuser name: sftpuser
vars: vars:
chroot: /srv/backup chroot: /srv/backup
user: backup user: backup
publickeys: "{{ backup_publickeys }}" publickeys: "{{ backup_publickeys }}"
- name: create backup directory - name: Create backup directory
file: ansible.builtin.file:
path: /export/backup path: /export/backup
state: directory state: directory
mode: 02750 mode: 02750
owner: root owner: root
group: backup group: backup
- name: link backup directory - name: Link backup directory
file: ansible.builtin.file:
path: /srv/backup path: /srv/backup
src: /export/backup src: /export/backup
state: link state: link
@ -121,16 +121,16 @@
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
follow: false follow: false
- name: copy backup script - name: Copy backup script
copy: ansible.builtin.copy:
dest: /usr/local/sbin/mariadb-backup dest: /usr/local/sbin/mariadb-backup
src: mariadb-backup.sh src: mariadb-backup.sh
mode: 0755 mode: 0755
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
- name: create backup cron job - name: Create backup cron job
cron: ansible.builtin.cron:
name: mariadb-backup name: mariadb-backup
job: /usr/local/sbin/mariadb-backup job: /usr/local/sbin/mariadb-backup
hour: "0" hour: "0"