Remove zm hosts
This commit is contained in:
parent
cb7ca70d16
commit
a0bee46545
4 changed files with 0 additions and 132 deletions
|
@ -1,23 +0,0 @@
|
|||
---
|
||||
mem_size: 4096
|
||||
num_cpus: 2
|
||||
datadisks:
|
||||
- {size: 500}
|
||||
|
||||
network_vip_interfaces:
|
||||
- device: eth1
|
||||
vhid: 26
|
||||
ipaddr: 172.20.26.1
|
||||
netmask: 255.255.0.0
|
||||
pass: "{{ vip26_pass }}"
|
||||
|
||||
zm_mysql_host: sqldb02.home.foo.sh
|
||||
dhcpd_template: dhcpd.conf.cam.j2
|
||||
|
||||
firewall_in:
|
||||
- {proto: tcp, port: 22, from: [172.20.20.0/22]}
|
||||
- {proto: tcp, port: 443, from: [172.20.20.0/22]}
|
||||
- {proto: tcp, port: 9100, from: [172.20.20.0/22]}
|
||||
firewall_raw:
|
||||
- "-A INPUT -i eth1 -d 224.0.0.0/8 -j ACCEPT"
|
||||
- "-A INPUT -i eth1 -p vrrp -j ACCEPT"
|
|
@ -1,13 +0,0 @@
|
|||
---
|
||||
vmhost: vmhost02.home.foo.sh
|
||||
network_interfaces:
|
||||
- device: eth0
|
||||
vlan: 20
|
||||
mac: "52:54:00:ac:dc:4c"
|
||||
nameservers: []
|
||||
- device: eth1
|
||||
vlan: 26
|
||||
ipaddr: 172.20.26.3
|
||||
netmask: 255.255.255.0
|
||||
proto: static
|
||||
nameservers: [172.20.26.1, 172.20.26.3]
|
|
@ -117,9 +117,6 @@ vmhost:
|
|||
hosts:
|
||||
vmhost01.home.foo.sh:
|
||||
vmhost02.home.foo.sh:
|
||||
zm:
|
||||
hosts:
|
||||
zm02.home.foo.sh:
|
||||
|
||||
sftpbackup:
|
||||
children:
|
||||
|
@ -154,7 +151,6 @@ rocky8:
|
|||
nms:
|
||||
print:
|
||||
shell:
|
||||
zm:
|
||||
rocky9:
|
||||
children:
|
||||
adm:
|
||||
|
|
|
@ -1,92 +0,0 @@
|
|||
---
|
||||
- name: Deploy KVM virtual machines
|
||||
ansible.builtin.import_playbook: include/deploy-kvm-guest.yml
|
||||
vars:
|
||||
myhosts: zm
|
||||
|
||||
- name: Configure instance
|
||||
hosts: zm
|
||||
user: root
|
||||
gather_facts: true
|
||||
|
||||
vars_files:
|
||||
- "{{ ansible_private }}/vars.yml"
|
||||
|
||||
pre_tasks:
|
||||
- name: Mount /export
|
||||
ansible.posix.mount:
|
||||
name: /export
|
||||
src: LABEL=/export
|
||||
fstype: xfs
|
||||
opts: noatime,noexec,nosuid,nodev
|
||||
passno: "0"
|
||||
dump: "0"
|
||||
state: mounted
|
||||
|
||||
roles:
|
||||
- base
|
||||
- mod_auth_gssapi
|
||||
- role: keytab
|
||||
keytab_path: /etc/httpd/httpd.keytab
|
||||
keytab_principals: HTTP/zm.foo.sh@FOO.SH
|
||||
keytab_group: apache
|
||||
|
||||
tasks:
|
||||
- name: Run handlers to get interfaces configured
|
||||
ansible.builtin.meta: flush_handlers
|
||||
|
||||
# TODO: this should really be fixed
|
||||
- name: Put selinux in permissive state
|
||||
ansible.posix.selinux:
|
||||
policy: targeted
|
||||
state: permissive
|
||||
|
||||
- name: Copy DNS zone files
|
||||
ansible.builtin.copy:
|
||||
dest: "/var/lib/unbound/{{ item }}"
|
||||
src: "/srv/dns/{{ item }}"
|
||||
mode: "0644"
|
||||
owner: root
|
||||
group: "{{ ansible_wheel }}"
|
||||
tags: dns
|
||||
notify: Restart unbound
|
||||
with_items:
|
||||
- 26.20.172.in-addr.arpa
|
||||
- cam.foo.sh
|
||||
|
||||
- name: Include unbound role
|
||||
ansible.builtin.import_role:
|
||||
name: unbound
|
||||
|
||||
- name: Include dhcpd and zoneminder roles
|
||||
ansible.builtin.include_role:
|
||||
name: "{{ item }}"
|
||||
with_items:
|
||||
- dhcpd
|
||||
- zoneminder
|
||||
|
||||
- name: Install extra packages for debugging
|
||||
ansible.builtin.package:
|
||||
name: rtmpdump
|
||||
state: installed
|
||||
|
||||
- name: Require authentication for zoneminder
|
||||
ansible.builtin.copy:
|
||||
dest: /etc/httpd/conf.local.d/zoneminder-auth.conf
|
||||
content: |
|
||||
<Location /zm>
|
||||
AuthType GSSAPI
|
||||
GssapiBasicAuth Off
|
||||
AuthName "Password Required"
|
||||
Require valid-user
|
||||
</Location>
|
||||
mode: "0644"
|
||||
owner: root
|
||||
group: "{{ ansible_wheel }}"
|
||||
notify: Restart apache
|
||||
|
||||
- name: Enable NTP server for cam network
|
||||
ansible.builtin.lineinfile:
|
||||
path: /etc/chrony.conf
|
||||
regexp: "^#?allow .*"
|
||||
line: "allow 172.20.26.0/24"
|
Loading…
Add table
Reference in a new issue