mariadb: ansible-lint fixes
This commit is contained in:
parent
6d9d89da71
commit
41fe5a3892
2 changed files with 40 additions and 40 deletions
|
@ -1,5 +1,5 @@
|
||||||
---
|
---
|
||||||
- name: restart mariadb
|
- name: Restart mariadb
|
||||||
service:
|
ansible.builtin.service:
|
||||||
name: mariadb
|
name: mariadb
|
||||||
state: restarted
|
state: restarted
|
||||||
|
|
|
@ -1,19 +1,19 @@
|
||||||
---
|
---
|
||||||
- name: install packages
|
- name: Install packages
|
||||||
package:
|
ansible.builtin.package:
|
||||||
name: "{{ item }}"
|
name: "{{ item }}"
|
||||||
state: installed
|
state: installed
|
||||||
with_items:
|
with_items:
|
||||||
- mariadb-server
|
- mariadb-server
|
||||||
- python3-PyMySQL
|
- python3-PyMySQL
|
||||||
|
|
||||||
- name: fix selinux contexts from data directory
|
- name: Fix SELinux contexts from data directory
|
||||||
sefcontext:
|
community.general.sefcontext:
|
||||||
path: "/export/mariadb(/.*)?"
|
path: "/export/mariadb(/.*)?"
|
||||||
setype: mysqld_db_t
|
setype: mysqld_db_t
|
||||||
|
|
||||||
- name: create data directory
|
- name: Create data directory
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /export/mariadb
|
path: /export/mariadb
|
||||||
state: directory
|
state: directory
|
||||||
mode: 0750
|
mode: 0750
|
||||||
|
@ -21,8 +21,8 @@
|
||||||
group: mysql
|
group: mysql
|
||||||
setype: _default
|
setype: _default
|
||||||
|
|
||||||
- name: link data diretory
|
- name: Link data diretory
|
||||||
file:
|
ansible.builtin.file:
|
||||||
dest: /srv/mariadb
|
dest: /srv/mariadb
|
||||||
src: /export/mariadb
|
src: /export/mariadb
|
||||||
state: link
|
state: link
|
||||||
|
@ -30,54 +30,54 @@
|
||||||
group: "{{ ansible_wheel }}"
|
group: "{{ ansible_wheel }}"
|
||||||
follow: false
|
follow: false
|
||||||
|
|
||||||
- name: configure data directory
|
- name: Configure data directory
|
||||||
lineinfile:
|
ansible.builtin.lineinfile:
|
||||||
path: /etc/my.cnf.d/mariadb-server.cnf
|
path: /etc/my.cnf.d/mariadb-server.cnf
|
||||||
regexp: "^datadir=.*"
|
regexp: "^datadir=.*"
|
||||||
line: datadir=/srv/mariadb
|
line: datadir=/srv/mariadb
|
||||||
notify: restart mariadb
|
notify: Restart mariadb
|
||||||
|
|
||||||
- name: create additional config directory
|
- name: Create additional config directory
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /etc/mysql
|
path: /etc/mysql
|
||||||
state: directory
|
state: directory
|
||||||
mode: 0750
|
mode: 0750
|
||||||
owner: root
|
owner: root
|
||||||
group: mysql
|
group: mysql
|
||||||
|
|
||||||
- name: allow mysql user to read private key
|
- name: Allow mysql user to read private key
|
||||||
user:
|
ansible.builtin.user:
|
||||||
name: mysql
|
name: mysql
|
||||||
groups: hostkey
|
groups: hostkey
|
||||||
append: true
|
append: true
|
||||||
notify: restart mariadb
|
notify: Restart mariadb
|
||||||
|
|
||||||
- name: create tls configuration
|
- name: Create TLS configuration
|
||||||
template:
|
ansible.builtin.template:
|
||||||
dest: /etc/my.cnf.d/tls.cnf
|
dest: /etc/my.cnf.d/tls.cnf
|
||||||
src: tls.cnf.j2
|
src: tls.cnf.j2
|
||||||
mode: 0644
|
mode: 0644
|
||||||
owner: root
|
owner: root
|
||||||
group: "{{ ansible_wheel }}"
|
group: "{{ ansible_wheel }}"
|
||||||
notify: restart mariadb
|
notify: Restart mariadb
|
||||||
|
|
||||||
- name: create local configuration
|
- name: Create local configuration
|
||||||
copy:
|
ansible.builtin.copy:
|
||||||
dest: /etc/my.cnf.d/local.cnf
|
dest: /etc/my.cnf.d/local.cnf
|
||||||
content: "[mariadb]\ninnodb_file_per_table=ON\n"
|
content: "[mariadb]\ninnodb_file_per_table=ON\n"
|
||||||
mode: 0644
|
mode: 0644
|
||||||
owner: root
|
owner: root
|
||||||
group: "{{ ansible_wheel }}"
|
group: "{{ ansible_wheel }}"
|
||||||
notify: restart mariadb
|
notify: Restart mariadb
|
||||||
|
|
||||||
- name: enable service
|
- name: Enable service
|
||||||
service:
|
ansible.builtin.service:
|
||||||
name: mariadb
|
name: mariadb
|
||||||
state: started
|
state: started
|
||||||
enabled: true
|
enabled: true
|
||||||
|
|
||||||
- name: set root password
|
- name: Set root password
|
||||||
mysql_user:
|
community.mysql.mysql_user:
|
||||||
name: root
|
name: root
|
||||||
password: "{{ mariadb_root_password }}"
|
password: "{{ mariadb_root_password }}"
|
||||||
login_user: root
|
login_user: root
|
||||||
|
@ -87,8 +87,8 @@
|
||||||
no_log: true
|
no_log: true
|
||||||
when: mariadb_root_password is defined
|
when: mariadb_root_password is defined
|
||||||
|
|
||||||
- name: create root .my.cnf
|
- name: Create root .my.cnf
|
||||||
template:
|
ansible.builtin.template:
|
||||||
dest: /root/.my.cnf
|
dest: /root/.my.cnf
|
||||||
src: my.cnf.j2
|
src: my.cnf.j2
|
||||||
mode: 0600
|
mode: 0600
|
||||||
|
@ -96,24 +96,24 @@
|
||||||
group: "{{ ansible_wheel }}"
|
group: "{{ ansible_wheel }}"
|
||||||
when: mariadb_root_password is defined
|
when: mariadb_root_password is defined
|
||||||
|
|
||||||
- name: import sftpuser role
|
- name: Import sftpuser role
|
||||||
import_role:
|
ansible.builtin.import_role:
|
||||||
name: sftpuser
|
name: sftpuser
|
||||||
vars:
|
vars:
|
||||||
chroot: /srv/backup
|
chroot: /srv/backup
|
||||||
user: backup
|
user: backup
|
||||||
publickeys: "{{ backup_publickeys }}"
|
publickeys: "{{ backup_publickeys }}"
|
||||||
|
|
||||||
- name: create backup directory
|
- name: Create backup directory
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /export/backup
|
path: /export/backup
|
||||||
state: directory
|
state: directory
|
||||||
mode: 02750
|
mode: 02750
|
||||||
owner: root
|
owner: root
|
||||||
group: backup
|
group: backup
|
||||||
|
|
||||||
- name: link backup directory
|
- name: Link backup directory
|
||||||
file:
|
ansible.builtin.file:
|
||||||
path: /srv/backup
|
path: /srv/backup
|
||||||
src: /export/backup
|
src: /export/backup
|
||||||
state: link
|
state: link
|
||||||
|
@ -121,16 +121,16 @@
|
||||||
group: "{{ ansible_wheel }}"
|
group: "{{ ansible_wheel }}"
|
||||||
follow: false
|
follow: false
|
||||||
|
|
||||||
- name: copy backup script
|
- name: Copy backup script
|
||||||
copy:
|
ansible.builtin.copy:
|
||||||
dest: /usr/local/sbin/mariadb-backup
|
dest: /usr/local/sbin/mariadb-backup
|
||||||
src: mariadb-backup.sh
|
src: mariadb-backup.sh
|
||||||
mode: 0755
|
mode: 0755
|
||||||
owner: root
|
owner: root
|
||||||
group: "{{ ansible_wheel }}"
|
group: "{{ ansible_wheel }}"
|
||||||
|
|
||||||
- name: create backup cron job
|
- name: Create backup cron job
|
||||||
cron:
|
ansible.builtin.cron:
|
||||||
name: mariadb-backup
|
name: mariadb-backup
|
||||||
job: /usr/local/sbin/mariadb-backup
|
job: /usr/local/sbin/mariadb-backup
|
||||||
hour: "0"
|
hour: "0"
|
||||||
|
|
Loading…
Add table
Reference in a new issue