diff --git a/roles/zoneminder/defaults/main.yml b/roles/zoneminder/defaults/main.yml deleted file mode 100644 index a4bf72a..0000000 --- a/roles/zoneminder/defaults/main.yml +++ /dev/null @@ -1,4 +0,0 @@ ---- -zm_mysql_host: localhost -zm_mysql_db: zm -zm_mysql_user: zmuser diff --git a/roles/zoneminder/handlers/main.yml b/roles/zoneminder/handlers/main.yml deleted file mode 100644 index d34c003..0000000 --- a/roles/zoneminder/handlers/main.yml +++ /dev/null @@ -1,5 +0,0 @@ ---- -- name: Restart zoneminder - ansible.builtin.service: - name: zoneminder - state: restarted diff --git a/roles/zoneminder/meta/main.yml b/roles/zoneminder/meta/main.yml deleted file mode 100644 index 39b2859..0000000 --- a/roles/zoneminder/meta/main.yml +++ /dev/null @@ -1,4 +0,0 @@ ---- -dependencies: - - {role: apache} - - {role: rpmfusion_free_repo} diff --git a/roles/zoneminder/tasks/main.yml b/roles/zoneminder/tasks/main.yml deleted file mode 100644 index c8de160..0000000 --- a/roles/zoneminder/tasks/main.yml +++ /dev/null @@ -1,129 +0,0 @@ ---- -- name: Fix SELinux contexts from cache directory - community.general.sefcontext: - path: "/var/cache/zoneminder(/.*)?" - setype: httpd_cache_t - -- name: Install packages - ansible.builtin.package: - name: "{{ item }}" - state: installed - with_items: - - mariadb - - zoneminder-httpd - -- name: Fix SELinux contexts from data directory - community.general.sefcontext: - path: "/export/zoneminder(/.*)?" - setype: zoneminder_var_lib_t - -- name: Create data directory - ansible.builtin.file: - path: /export/zoneminder - state: directory - mode: "0750" - owner: apache - group: apache - setype: _default - -- name: Link data directory - ansible.builtin.file: - dest: /srv/zoneminder - src: /export/zoneminder - state: link - owner: root - group: "{{ ansible_wheel }}" - follow: false - -- name: Create config - ansible.builtin.template: - dest: /etc/zm/conf.d/local.conf - src: zm.conf - mode: "0640" - owner: root - group: apache - notify: Restart zoneminder - -- name: Remove mariadb depency from unit file - ansible.builtin.shell: - cmd: >- - sed -e 's/mariadb\.service//' /lib/systemd/system/zoneminder.service - > /etc/systemd/system/zoneminder.service - creates: /etc/systemd/system/zoneminder.service - warn: false - notify: Restart zoneminder - when: zm_mysql_host != "localhost" - -- name: Allow zoneminder to read host private key - ansible.builtin.user: - name: apache - groups: hostkey - append: true - notify: Restart zoneminder - when: zm_mysql_host != "localhost" - -- name: Loosen SELinux settings - ansible.posix.seboolean: - name: "{{ item }}" - state: true - persistent: true - with_items: - - domain_can_mmap_files - - nis_enabled - -# selinux doesn't allow create this -- name: Create stub web log - ansible.builtin.file: - dest: /var/log/zoneminder/web_php.log - state: touch - mode: "0640" - owner: apache - group: apache - access_time: preserve - modification_time: preserve - -- name: Link apache config - ansible.builtin.file: - dest: /etc/httpd/conf.local.d/zm.conf - src: /etc/zm/www/zoneminder.httpd.conf - state: link - owner: root - group: "{{ ansible_wheel }}" - notify: Restart apache - -- name: Link apache php config - ansible.builtin.file: - dest: /etc/httpd/conf.local.d/php.conf - src: /etc/httpd/conf.d/php.conf - state: link - owner: root - group: "{{ ansible_wheel }}" - notify: Restart apache - -- name: Configure zoneminder timezone - ansible.builtin.copy: - dest: /etc/php.d/timezone.ini - content: "date.timezone=UTC\n" - mode: "0644" - owner: root - group: "{{ ansible_wheel }}" - notify: Restart apache - -# required for database updates to work -- name: Configure mysql client to use ssl - ansible.builtin.copy: - dest: /root/.my.cnf - content: | - [client] - ssl-ca={{ tls_certs }}/ca.crt - ssl-cert={{ tls_certs }}/{{ inventory_hostname }}.crt - ssl-key={{ tls_private }}/{{ inventory_hostname }}.key - mode: "0600" - owner: root - group: "{{ ansible_wheel }}" - -- name: Enable service - ansible.builtin.service: - name: zoneminder - state: started - enabled: true diff --git a/roles/zoneminder/templates/zm.conf b/roles/zoneminder/templates/zm.conf deleted file mode 100644 index 9e29854..0000000 --- a/roles/zoneminder/templates/zm.conf +++ /dev/null @@ -1,13 +0,0 @@ -# {{ ansible_managed }} - -ZM_DIR_EVENTS=/srv/zoneminder - -ZM_DB_HOST={{ zm_mysql_host }} -ZM_DB_NAME={{ zm_mysql_db}} -ZM_DB_USER={{ zm_mysql_user }} -ZM_DB_PASS={{ zm_mysql_pass }} -{% if zm_mysql_host != "localhost" %} -ZM_DB_SSL_CA_CERT={{ tls_certs }}/ca.crt -ZM_DB_SSL_CLIENT_KEY={{ tls_private }}/{{ inventory_hostname }}.key -ZM_DB_SSL_CLIENT_CERT={{ tls_certs }}/{{ inventory_hostname }}.crt -{% endif %}