foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

thinlinc_server: ansible-lint fixes

Browse source
This commit is contained in:
Timo Makinen 2022-10-29 17:45:42 +00:00
parent 50186fa466
commit 6d9d89da71
2 changed files with 23 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
roles/thinlinc_server/handlers/main.yml
View file

@ -1,10 +1,10 @@
--- ---
- name: restart tlwebaccess - name: Restart tlwebaccess
ansible.builtin.service: ansible.builtin.service:
name: tlwebaccess name: tlwebaccess
state: restarted state: restarted
- name: restart vsmagent - name: Restart vsmagent
ansible.builtin.service: ansible.builtin.service:
name: vsmagent name: vsmagent
state: restarted state: restarted

42
roles/thinlinc_server/tasks/main.yml
View file

@ -1,5 +1,5 @@
--- ---
- name: install prequisites - name: Install prequisites
ansible.builtin.package: ansible.builtin.package:
name: "{{ item }}" name: "{{ item }}"
state: installed state: installed
@ -8,15 +8,15 @@
- python3 - python3
- python3-gobject - python3-gobject
- name: install thinlinc repository - name: Install ThinLinc repository
ansible.builtin.yum_repository: ansible.builtin.yum_repository:
name: thinlinc name: thinlinc
baseurl: "https://mirrors.foo.sh/thinlinc/{{ ansible_architecture }}" baseurl: "https://mirrors.foo.sh/thinlinc/{{ ansible_architecture }}"
description: Cendio Thinlinc description: Cendio ThinLinc
gpgcheck: false gpgcheck: false
enabled: true enabled: true
- name: install packages - name: Install packages
ansible.builtin.package: ansible.builtin.package:
name: "{{ item }}" name: "{{ item }}"
state: installed state: installed
@ -29,12 +29,12 @@
- thinlinc-vsm - thinlinc-vsm
- thinlinc-webaccess - thinlinc-webaccess
- name: run thinlinc setup - name: Run ThinLinc setup
ansible.builtin.script: ansible.builtin.script:
cmd: tl-setup.local.sh cmd: tl-setup.local.sh
creates: /var/log/tlsetup.log creates: /var/log/tlsetup.log
- name: disable polkit auth dialogs during login - name: Disable polkit auth dialogs during login
ansible.builtin.copy: ansible.builtin.copy:
dest: /etc/polkit-1/rules.d/40-thinlinc-no-auth-dialogs.rules dest: /etc/polkit-1/rules.d/40-thinlinc-no-auth-dialogs.rules
src: 40-thinlinc-no-auth-dialogs.rules src: 40-thinlinc-no-auth-dialogs.rules
@ -42,26 +42,26 @@
owner: root owner: root
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
- name: use gnome desktop automatically - name: Use GNOME desktop automatically
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: /opt/thinlinc/etc/conf.d/profiles.hconf path: /opt/thinlinc/etc/conf.d/profiles.hconf
regexp: "^order=.*" regexp: "^order=.*"
line: order=gnome line: order=gnome
- name: disable introduction message - name: Disable introduction message
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: /opt/thinlinc/etc/conf.d/profiles.hconf path: /opt/thinlinc/etc/conf.d/profiles.hconf
regexp: "^show_intro=.*" regexp: "^show_intro=.*"
line: show_intro=false line: show_intro=false
- name: configure vsmagent hostname - name: Configure vsmagent hostname
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: /opt/thinlinc/etc/conf.d/vsmagent.hconf path: /opt/thinlinc/etc/conf.d/vsmagent.hconf
regexp: "^agent_hostname=.*" regexp: "^agent_hostname=.*"
line: "agent_hostname={{ inventory_hostname }}" line: "agent_hostname={{ inventory_hostname }}"
notify: restart vsmagent notify: Restart vsmagent
- name: copy private key - name: Copy private key
ansible.builtin.copy: ansible.builtin.copy:
dest: /opt/thinlinc/etc/tlwebaccess/server.key dest: /opt/thinlinc/etc/tlwebaccess/server.key
src: "{{ item }}" src: "{{ item }}"
@ -72,9 +72,9 @@
- "/srv/letsencrypt/live/{{ inventory_hostname }}/privkey.pem" - "/srv/letsencrypt/live/{{ inventory_hostname }}/privkey.pem"
- "/srv/ca/certs/hosts/{{ inventory_hostname }}.key" - "/srv/ca/certs/hosts/{{ inventory_hostname }}.key"
tags: certificates tags: certificates
notify: restart tlwebaccess notify: Restart tlwebaccess
- name: copy certificate - name: Copy certificate
ansible.builtin.copy: ansible.builtin.copy:
dest: /opt/thinlinc/etc/tlwebaccess/server.crt dest: /opt/thinlinc/etc/tlwebaccess/server.crt
src: "{{ item }}" src: "{{ item }}"
@ -86,30 +86,30 @@
- "/srv/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem" - "/srv/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem"
- "/srv/ca/private/{{ inventory_hostname }}.crt" - "/srv/ca/private/{{ inventory_hostname }}.crt"
tags: certificates tags: certificates
notify: restart tlwebaccess notify: Restart tlwebaccess
- name: configure webaccess port - name: Configure webaccess port
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: /opt/thinlinc/etc/conf.d/webaccess.hconf path: /opt/thinlinc/etc/conf.d/webaccess.hconf
regexp: "^listen_port=.*" regexp: "^listen_port=.*"
line: "listen_port=443" line: "listen_port=443"
notify: restart tlwebaccess notify: Restart tlwebaccess
- name: configure webaccess url - name: Configure webaccess url
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: /opt/thinlinc/etc/conf.d/webaccess.hconf path: /opt/thinlinc/etc/conf.d/webaccess.hconf
regexp: "^login_page=.*" regexp: "^login_page=.*"
line: "login_page=https://{{ inventory_hostname }}/" line: "login_page=https://{{ inventory_hostname }}/"
notify: restart tlwebaccess notify: Restart tlwebaccess
- name: configure webaccess tls settings - name: Configure webaccess tls settings
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: /opt/thinlinc/etc/conf.d/webaccess.hconf path: /opt/thinlinc/etc/conf.d/webaccess.hconf
regexp: "^gnutls_priority=.*" regexp: "^gnutls_priority=.*"
line: "gnutls_priority=SECURE256" line: "gnutls_priority=SECURE256"
notify: restart tlwebaccess notify: Restart tlwebaccess
- name: start thinlinc services - name: Enable services
ansible.builtin.service: ansible.builtin.service:
name: "{{ item }}" name: "{{ item }}"
state: started state: started