antoine/visio_nrd
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

yamllint

Browse Source
This commit is contained in:
Antoine Ouvrard
2021-05-04 17:27:25 +02:00
parent 5edcb56305
commit 2bc9af1308
14 changed files with 68 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/bbb-disable-test-echo/tasks/main.yml
+2 -1
View File
@@ -1,7 +1,8 @@
---
- name: Désactivation du test d'écho effectué lors de l'accès à la room
lineinfile:
path: /usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml
path:
/usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml
regexp: ' skipCheck: false'
line: ' skipCheck: true'
notify:
roles/bbb-enable-sip/tasks/main.yml
+7 -4
View File
@@ -29,16 +29,19 @@
lineinfile:
path: /usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties
regexp: "defaultWelcomeMessageFooter="
line:
"defaultWelcomeMessageFooter=Pour rejoindre la conférence par téléphone,
appeler au num&eacute;ro :<br> %%DIALNUM%%<br> puis saisir le code :<br> %%CONFNUM%%"
line: >
"defaultWelcomeMessageFooter=Pour rejoindre la conf&eacute;rence par
t&eacute;l&eacute;phone, appeler au num&eacute;ro :<br> %%DIALNUM%%<br>
puis saisir le code :<br> %%CONFNUM%%"
notify:
- restart bigbluebutton
- name: Changement du message d'accueil audio
copy:
src: "{{ inventory_hostname }}/bbb-sounds/{{ item }}/conf-pin.wav"
dest: "/opt/freeswitch/share/freeswitch/sounds/en/us/callie/conference/{{ item }}/"
dest:
# yamllint disable-line rule:line-length
"/opt/freeswitch/share/freeswitch/sounds/en/us/callie/conference/{{ item }}/"
owner: freeswitch
group: daemon
mode: u=rw,g=r,o=r
roles/bbb-set-hostname/tasks/main.yml
+6 -2
View File
@@ -19,7 +19,9 @@
- name: Récup du hostname actuellement configuré
set_fact:
oldHostname: "{{ lookup('ini', 'bigbluebutton.web.serverURL type=properties file=/tmp/bigbluebutton.properties') | urlsplit('hostname') }}"
oldHostname:
# yamllint disable-line rule:line-length
"{{ lookup('ini', 'bigbluebutton.web.serverURL type=properties file=/tmp/bigbluebutton.properties') | urlsplit('hostname') }}"
- name: execution de la commande bigbluebutton qui set le nouveau nom de domaine
command: "bbb-conf --setip {{ bbbHostname }}"
@@ -56,7 +58,9 @@
when: not ssl_file.stat.exists
- name: Certif LE
command: certbot --webroot -w /var/www/bigbluebutton-default/ -d {{ bbbHostname }} certonly
command:
# yamllint disable-line rule:line-length
certbot --webroot -w /var/www/bigbluebutton-default/ -d {{ bbbHostname }} certonly
when: not ssl_file.stat.exists
- name: Suppression de la conf temporaire LE
roles/jitsi-add-sip/tasks/main.yml
+3 -1
View File
@@ -22,4 +22,6 @@
lineinfile:
path: /etc/jitsi/jigasi/sip-communicator.properties
regexp: "org.jitsi.jigasi.DEFAULT_JVB_ROOM_NAME="
line: "org.jitsi.jigasi.DEFAULT_JVB_ROOM_NAME={{ jigasi_sip_room }}@conference.{{ inventory_hostname }}"
line:
# yamllint disable-line rule:line-length
"org.jitsi.jigasi.DEFAULT_JVB_ROOM_NAME={{ jigasi_sip_room }}@conference.{{ inventory_hostname }}"
roles/jitsi-enable-auth/tasks/main.yml
+2 -1
View File
@@ -43,7 +43,8 @@
- restart jicofo
- name: Conf Jitsi - Création de l'utilisateur prosody
command: prosodyctl register {{ jitsi_user }} {{ inventory_hostname }} {{ jitsi_pass }}
command:
prosodyctl register {{jitsi_user}} {{inventory_hostname}} {{jitsi_pass}}
notify:
- restart prosody
- restart jitsi-videobridge2
roles/jitsi-enable-external-coturn/tasks/main.yml
+2 -1
View File
@@ -23,7 +23,8 @@
- ['port = 5349', 'port = 443']
notify: restart prosody
- name: indique a jitsi les règles d'échange des credentials pour le coturn externe
- name: indique a jitsi les règles d'échange des credentials
pour le coturn externe
blockinfile:
path: /etc/prosody/conf.d/{{ inventory_hostname }}.cfg.lua
marker: "-- {mark} ANSIBLE MANAGED BLOCK"
roles/jitsi-enable-jibri/tasks/main.yml
+4
View File
@@ -20,16 +20,20 @@
- restart prosody
- name: utilisateur jibri pour prosody (auth)
# yamllint disable-line rule:line-length
command: prosodyctl register {{ item.user }} auth.{{ inventory_hostname }} {{ item.password }}
args:
# Prosody remplace les points par des '%2e' dans le chemin du fichier
# yamllint disable-line rule:line-length
creates: /var/lib/prosody/{{ 'auth%2e'+inventory_hostname | replace('.', '%2e') }}/accounts/{{ item.user }}.dat
loop: "{{ jibri_users }}"
- name: utilisateur jibri pour prosody (recorder)
# yamllint disable-line rule:line-length
command: prosodyctl register {{ item.user }}-record recorder.{{ inventory_hostname }} {{ item.password }}
args:
# Prosody remplace les points par des '%2e' dans le chemin du fichier
# yamllint disable-line rule:line-length
creates: /var/lib/prosody/{{ 'auth%2e'+inventory_hostname | replace('.', '%2e') }}/accounts/{{ item.user }}.dat
loop: "{{ jibri_users }}"
roles/jitsi-enable-metrics/tasks/main.yml
+2 -1
View File
@@ -7,7 +7,8 @@
regexp: "^org.jitsi.videobridge.ENABLE_STATISTICS"
line: "org.jitsi.videobridge.ENABLE_STATISTICS=true"
- name: configuration du videobridge pour transporter les stats via colibri REST api
- name: configuration du videobridge pour transporter les stats
via colibri REST api
lineinfile:
path: "/etc/jitsi/videobridge/sip-communicator.properties"
regexp: "^org.jitsi.videobridge.STATISTICS_TRANSPORT"
roles/jitsi-enable-multidomain/tasks/jitsi.yml
+3 -1
View File
@@ -3,7 +3,9 @@
replace:
path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
regexp: '[^?]{{ inventory_hostname }}/http-bind'
replace: '<!--# echo var="http_host" -->/<!--# echo var="subdir" default="" -->http-bind'
replace: >
'<!--# echo var="http_host" -->/<!--#
echo var="subdir" default="" -->http-bind'
notify:
- restart jitsi-videobridge2
- restart nginx
roles/jitsi-enable-multidomain/tasks/nginx.yml
+2 -1
View File
@@ -24,7 +24,8 @@
regexp: '[^?]\$http_host'
replace: ' {{ inventory_hostname }}'
- name: Conf Jitsi MultiDomain - suppression du paramètre server_names_hash_bucket_size car génère une erreur si en doublon
- name: Conf Jitsi MultiDomain - suppression du paramètre
server_names_hash_bucket_size car génère une erreur si en doublon
lineinfile:
path: /etc/nginx/sites-available/{{ hostname }}.conf
state: absent
roles/jitsi-enable-multidomain/tasks/ssl.yml
+16 -7
View File
@@ -12,23 +12,30 @@
remote_src: true
when: not ssl_file.stat.exists
- name: Conf SSL MultiDomain - rend le nom de domaine paramétrable dans le script certbot de jitsi
- name: Conf SSL MultiDomain - rend le nom de domaine paramétrable dans le
script certbot de jitsi
replace:
path: /usr/share/jitsi-meet/scripts/install-letsencrypt-cert-with-param.sh
regexp: '^DOMAIN="\${DEB_CONF_RESULT##\*:}"'
replace: "DOMAIN=$1"
- name: Conf SSL MultiDomain - Exécution du script lets encrypt
command: "/usr/share/jitsi-meet/scripts/install-letsencrypt-cert-with-param.sh {{ item }}"
command:
# yamllint disable-line rule:line-length
"/usr/share/jitsi-meet/scripts/install-letsencrypt-cert-with-param.sh {{ item }}"
args:
creates: /etc/letsencrypt/live/{{ item }}/fullchain.pem # Execute le script que si ce fichier n'existe pas
creates:
/etc/letsencrypt/live/{{ item }}/fullchain.pem
# Execute le script que si ce fichier n'existe pas
loop: "{{ jitsi_multidomain_domain }}"
- name: Conf Jitsi MultiDomain - Change le ServerName des conf nginx
replace:
path: /etc/nginx/sites-available/{{ item }}.conf
regexp: "[^?]ssl_certificate /etc/letsencrypt/live/{{ inventory_hostname }}.*$"
replace: "ssl_certificate /etc/letsencrypt/live/{{ item }}/fullchain.pem;"
regexp:
"[^?]ssl_certificate /etc/letsencrypt/live/{{ inventory_hostname }}.*$"
replace:
"ssl_certificate /etc/letsencrypt/live/{{ item }}/fullchain.pem;"
loop: "{{ jitsi_multidomain_domain }}"
notify:
- restart nginx
@@ -36,8 +43,10 @@
- name: Conf Jitsi MultiDomain - Change le ServerName des conf nginx
replace:
path: /etc/nginx/sites-available/{{ item }}.conf
regexp: "[^?]ssl_certificate_key /etc/letsencrypt/live/{{ inventory_hostname }}.*$"
replace: "ssl_certificate_key /etc/letsencrypt/live/{{ item }}/privkey.pem;"
regexp:
"[^?]ssl_certificate_key /etc/letsencrypt/live/{{inventory_hostname}}.*$"
replace:
"ssl_certificate_key /etc/letsencrypt/live/{{ item }}/privkey.pem;"
loop: "{{ jitsi_multidomain_domain }}"
notify:
- restart nginx
roles/jitsi-enable-specific-komuniki/tasks/main.yml
+3
View File
@@ -22,6 +22,9 @@
line: '{{ item[1] }}'
loop:
- ['APP_NAME: ', " APP_NAME: 'Komuniki',"]
# yamllint disable-line rule:line-length
- ['DEFAULT_LOGO_URL: ', " DEFAULT_LOGO_URL: 'images/logo-komuniki.svg',"]
# yamllint disable-line rule:line-length
- ['DEFAULT_WELCOME_PAGE_LOGO_URL: ', " DEFAULT_WELCOME_PAGE_LOGO_URL: 'images/logo-komuniki-txt.svg',"]
# yamllint disable-line rule:line-length
- ['JITSI_WATERMARK_LINK: ', " JITSI_WATERMARK_LINK: 'https://komuniki.fr',"]
roles/jitsi-install/tasks/main.yml
+10 -3
View File
@@ -10,6 +10,7 @@
state: present
- name: Mise en place des règle firewall tcp et udp
# yamllint disable-line rule:line-length
# source : https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart#setup-and-configure-your-firewall
ufw:
state: enabled
@@ -26,6 +27,7 @@
- ['5349', 'tcp']
- ['5222', 'tcp'] # XMPP port for recorder
# yamllint disable-line rule:line-length
- name: Import de la clé GPG # source: https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart#add-the-jitsi-package-repository
apt_key:
id: FFD65A0DA2BEBDEB73D44C8BB4D2D216F1FD7806
@@ -34,6 +36,7 @@
- name: Ajout du depot jitsi
apt_repository:
# yamllint disable-line rule:line-length
repo: deb [signed-by=/etc/apt/trusted.gpg.d/jitsi.gpg] https://download.jitsi.org stable/
update_cache: true
@@ -48,7 +51,9 @@
debconf:
name: jitsi-meet-web-config
question: jitsi-meet/cert-choice
value: "Generate a new self-signed certificate (You will later get a chance to obtain a Let's encrypt certificate)"
value: >
"Generate a new self-signed certificate (You will later get a chance to
obtain a Let's encrypt certificate)"
vtype: string
- name: installation de jitsi
@@ -65,8 +70,10 @@
- name: Exécution du script lets encrypt
shell:
cmd: /usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh >> jitsi-le.log
creates: /etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem # Execute le script que si ce fichier n'existe pas
cmd:
/usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh >> jitsi-le.log
creates: /etc/letsencrypt/live/{{ inventory_hostname }}/fullchain.pem
# Execute le script que si ce fichier n'existe pas
- name: Ajout d'un memo pour suprimer manuellement Jitsi
copy: