Move nms host roles to adm hosts

playbooks/adm.yml

@@ -28,6 +28,10 @@
     - ansible_host
     - certbot
     - cups
+    - nginx
+    - role: nginx_site
+      nginx_site_name: oob.foo.sh
+      nginx_site_plaintest: false
     - sshca
     - ssh_known_hosts
     - role: keytab
@@ -38,10 +42,36 @@
       autofs_home: false
     - sssd
     - mkhomedir
+    - aten_pdu
+    - routeros
     - rpm_build
+    - snmp_exporter
     - web_build
 
   tasks:
+    - name: Run handlers to get interfaces configured
+      ansible.builtin.meta: flush_handlers
+
+    - name: Enable UDP rsyslog server
+      ansible.builtin.import_role:
+        name: rsyslog
+        tasks_from: udp-listen
+
+    - name: Enable postfix mail relay
+      ansible.builtin.import_role:
+        name: postfix
+        tasks_from: relay
+      vars:
+        relay_domains: [foo.sh]
+
+    - name: Import unbound role
+      ansible.builtin.import_role:
+        name: unbound
+
+    - name: Import dhcpd role
+      ansible.builtin.import_role:
+        name: dhcpd
+
     - name: Install packages
       ansible.builtin.package:
         name: "{{ item }}"
@@ -150,3 +180,14 @@
         mode: "0755"
         owner: root
         group: "{{ ansible_wheel }}"
+
+    - name: Create sw-backup script
+      ansible.builtin.copy:
+        dest: /usr/local/bin/sw-backup
+        content: |
+          #!/bin/sh
+          set -eu
+          ssh "admin@${1}" /export > "/srv/backup/${1}.rsc"
+        mode: "0755"
+        owner: root
+        group: "{{ ansible_wheel }}"