réinstallation du jitsi komuniki

This commit is contained in:
Antoine Ouvrard
2020-11-27 17:21:59 +01:00
parent 97e259c193
commit 07a1176abe
2 changed files with 4 additions and 33 deletions
+3 -32
View File
@@ -1,42 +1,12 @@
---
- name: Installation de fail2ban, nftables, gnupg2, apt-transport-https, ufw
- name: Installation de sshguard, ufw
apt:
name:
- fail2ban
- nftables
- gnupg2
- apt-transport-https
- sshguard
- ufw
update_cache: true
state: present
- name: Appliquation des règles de ban ssh
template:
src: ../files/jail.conf
dest: /etc/fail2ban/jail.d/jail.conf
notify:
- restart fail2ban
- name: Création du répertoire pour la surcharge systemd
file:
name: /etc/systemd/system/fail2ban.service.d
state: directory
- name: Règle de base pour nftables
template:
src: ../files/fail2ban-override.conf
dest: /etc/systemd/system/fail2ban.service.d/override.conf
- name: Déploiement des règles nftables (base)
tags:
- nftables
template:
src: ../files/nftables.conf
dest: /etc/nftables.conf
notify:
- restart nftables
- restart fail2ban
- name: Mise en place des règle firewall tcp et udp
#source : https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart#setup-and-configure-your-firewall
ufw:
@@ -52,6 +22,7 @@
- ['10000','udp']
- ['3478','tcp']
- ['5349','udp']
- ['5222','tcp'] # XMPP port for recorder
- name: Ajout de la clé GPG pour le depot jitsi
apt_key: