Remove zm hosts

This commit is contained in:
Timo Makinen 2024-02-04 17:05:16 +00:00
parent cb7ca70d16
commit a0bee46545
4 changed files with 0 additions and 132 deletions

View file

@ -1,23 +0,0 @@
---
mem_size: 4096
num_cpus: 2
datadisks:
- {size: 500}
network_vip_interfaces:
- device: eth1
vhid: 26
ipaddr: 172.20.26.1
netmask: 255.255.0.0
pass: "{{ vip26_pass }}"
zm_mysql_host: sqldb02.home.foo.sh
dhcpd_template: dhcpd.conf.cam.j2
firewall_in:
- {proto: tcp, port: 22, from: [172.20.20.0/22]}
- {proto: tcp, port: 443, from: [172.20.20.0/22]}
- {proto: tcp, port: 9100, from: [172.20.20.0/22]}
firewall_raw:
- "-A INPUT -i eth1 -d 224.0.0.0/8 -j ACCEPT"
- "-A INPUT -i eth1 -p vrrp -j ACCEPT"

View file

@ -1,13 +0,0 @@
---
vmhost: vmhost02.home.foo.sh
network_interfaces:
- device: eth0
vlan: 20
mac: "52:54:00:ac:dc:4c"
nameservers: []
- device: eth1
vlan: 26
ipaddr: 172.20.26.3
netmask: 255.255.255.0
proto: static
nameservers: [172.20.26.1, 172.20.26.3]

View file

@ -117,9 +117,6 @@ vmhost:
hosts:
vmhost01.home.foo.sh:
vmhost02.home.foo.sh:
zm:
hosts:
zm02.home.foo.sh:
sftpbackup:
children:
@ -154,7 +151,6 @@ rocky8:
nms:
print:
shell:
zm:
rocky9:
children:
adm:

View file

@ -1,92 +0,0 @@
---
- name: Deploy KVM virtual machines
ansible.builtin.import_playbook: include/deploy-kvm-guest.yml
vars:
myhosts: zm
- name: Configure instance
hosts: zm
user: root
gather_facts: true
vars_files:
- "{{ ansible_private }}/vars.yml"
pre_tasks:
- name: Mount /export
ansible.posix.mount:
name: /export
src: LABEL=/export
fstype: xfs
opts: noatime,noexec,nosuid,nodev
passno: "0"
dump: "0"
state: mounted
roles:
- base
- mod_auth_gssapi
- role: keytab
keytab_path: /etc/httpd/httpd.keytab
keytab_principals: HTTP/zm.foo.sh@FOO.SH
keytab_group: apache
tasks:
- name: Run handlers to get interfaces configured
ansible.builtin.meta: flush_handlers
# TODO: this should really be fixed
- name: Put selinux in permissive state
ansible.posix.selinux:
policy: targeted
state: permissive
- name: Copy DNS zone files
ansible.builtin.copy:
dest: "/var/lib/unbound/{{ item }}"
src: "/srv/dns/{{ item }}"
mode: "0644"
owner: root
group: "{{ ansible_wheel }}"
tags: dns
notify: Restart unbound
with_items:
- 26.20.172.in-addr.arpa
- cam.foo.sh
- name: Include unbound role
ansible.builtin.import_role:
name: unbound
- name: Include dhcpd and zoneminder roles
ansible.builtin.include_role:
name: "{{ item }}"
with_items:
- dhcpd
- zoneminder
- name: Install extra packages for debugging
ansible.builtin.package:
name: rtmpdump
state: installed
- name: Require authentication for zoneminder
ansible.builtin.copy:
dest: /etc/httpd/conf.local.d/zoneminder-auth.conf
content: |
<Location /zm>
AuthType GSSAPI
GssapiBasicAuth Off
AuthName "Password Required"
Require valid-user
</Location>
mode: "0644"
owner: root
group: "{{ ansible_wheel }}"
notify: Restart apache
- name: Enable NTP server for cam network
ansible.builtin.lineinfile:
path: /etc/chrony.conf
regexp: "^#?allow .*"
line: "allow 172.20.26.0/24"