ajout du firewall et fail2ban
This commit is contained in:
Antoine Ouvrard
@@ -0,0 +1,44 @@
|
||||
---
|
||||
- name: Configuration de let's encrypt
|
||||
script: files/jitsi-letsencrypt.sh > jitsi-letsencrypt.log
|
||||
|
||||
- name: Conf Jitsi - UI en fr
|
||||
lineinfile:
|
||||
path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
|
||||
insertafter: "[^?]// defaultLanguage: 'en'"
|
||||
line: " defaultLanguage: 'fr',"
|
||||
|
||||
- name: Conf Jitsi - webcam en qualité medium par defaut 1/2
|
||||
lineinfile:
|
||||
path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
|
||||
insertafter: "[^?]// resolution: 720"
|
||||
line: " resolution: 360,"
|
||||
|
||||
- name: Conf Jitsi - webcam en qualité medium par defaut 2/2
|
||||
blockinfile:
|
||||
path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
|
||||
marker: "// {mark} ANSIBLE MANAGED BLOCK"
|
||||
insertafter: "// ratio of 16:9 with an ideal resolution of 720."
|
||||
block: |
|
||||
constraints: {
|
||||
video: {
|
||||
aspectRatio: 16 / 9,
|
||||
height: {
|
||||
ideal: 360,
|
||||
max: 360,
|
||||
min: 240
|
||||
}
|
||||
}
|
||||
},
|
||||
|
||||
- name: Conf Jitsi - Désactive l'effet floutage d'arrière plan
|
||||
replace:
|
||||
path: /usr/share/jitsi-meet/interface_config.js
|
||||
regexp: "'videobackgroundblur',"
|
||||
replace: ""
|
||||
|
||||
- name: Conf Jitsi - Active une alerte pour les utilisateurs de Firefox
|
||||
replace:
|
||||
path: /usr/share/jitsi-meet/interface_config.js
|
||||
regexp: "'firefox',"
|
||||
replace: ""
|
||||
@@ -0,0 +1,30 @@
|
||||
---
|
||||
- name: Ajout de la clé GPG pour le depot jitsi
|
||||
apt_key:
|
||||
url: https://download.jitsi.org/jitsi-key.gpg.key
|
||||
|
||||
- name: Ajout du depot jitsi
|
||||
apt_repository:
|
||||
repo: deb https://download.jitsi.org stable/
|
||||
|
||||
- name: apt update
|
||||
apt:
|
||||
update_cache: true
|
||||
|
||||
- name: Application du hostname avant installation
|
||||
debconf:
|
||||
name: jitsi-meet-web-config
|
||||
question: jitsi-videobridge/jvb-hostname
|
||||
value: '{{ inventory_hostname }}'
|
||||
vtype: string
|
||||
|
||||
- name: On veut un certificat autogénéré
|
||||
debconf:
|
||||
name: jitsi-meet-web-config
|
||||
question: jitsi-meet/cert-choice
|
||||
value: "Generate a new self-signed certificate (You will later get a chance to obtain a Let's encrypt certificate)"
|
||||
vtype: string
|
||||
|
||||
- name: installation de jitsi
|
||||
apt:
|
||||
name: jitsi-meet
|
||||
@@ -1,74 +1,4 @@
|
||||
---
|
||||
- name: Ajout de la clé GPG pour le depot jitsi
|
||||
apt_key:
|
||||
url: https://download.jitsi.org/jitsi-key.gpg.key
|
||||
|
||||
- name: Ajout du depot jitsi
|
||||
apt_repository:
|
||||
repo: deb https://download.jitsi.org stable/
|
||||
|
||||
- name: apt update
|
||||
apt:
|
||||
update_cache: true
|
||||
|
||||
- name: Application du hostname avant installation
|
||||
debconf:
|
||||
name: jitsi-meet-web-config
|
||||
question: jitsi-videobridge/jvb-hostname
|
||||
value: '{{ inventory_hostname }}'
|
||||
vtype: string
|
||||
|
||||
- name: On veut un certificat autogénéré
|
||||
debconf:
|
||||
name: jitsi-meet-web-config
|
||||
question: jitsi-meet/cert-choice
|
||||
value: "Generate a new self-signed certificate (You will later get a chance to obtain a Let's encrypt certificate)"
|
||||
vtype: string
|
||||
|
||||
- name: installation de jitsi
|
||||
apt:
|
||||
name: jitsi-meet
|
||||
|
||||
- name: Configuration de let's encrypt
|
||||
script: files/jitsi-letsencrypt.sh > jitsi-letsencrypt.log
|
||||
|
||||
- name: Conf Jitsi - UI en fr
|
||||
lineinfile:
|
||||
path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
|
||||
insertafter: "[^?]// defaultLanguage: 'en'"
|
||||
line: " defaultLanguage: 'fr',"
|
||||
|
||||
- name: Conf Jitsi - webcam en qualité medium par defaut 1/2
|
||||
lineinfile:
|
||||
path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
|
||||
insertafter: "[^?]// resolution: 720"
|
||||
line: " resolution: 360,"
|
||||
|
||||
- name: Conf Jitsi - webcam en qualité medium par defaut 2/2
|
||||
blockinfile:
|
||||
path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
|
||||
marker: "// {mark} ANSIBLE MANAGED BLOCK"
|
||||
insertafter: "// ratio of 16:9 with an ideal resolution of 720."
|
||||
block: |
|
||||
constraints: {
|
||||
video: {
|
||||
aspectRatio: 16 / 9,
|
||||
height: {
|
||||
ideal: 360,
|
||||
max: 360,
|
||||
min: 240
|
||||
}
|
||||
}
|
||||
},
|
||||
|
||||
- name: Conf Jitsi - Désactive l'effet floutage d'arrière plan
|
||||
replace:
|
||||
path: /usr/share/jitsi-meet/interface_config.js
|
||||
regexp: "'videobackgroundblur',"
|
||||
replace: ""
|
||||
|
||||
- name: Conf Jitsi - Active une alerte pour les utilisateurs de Firefox
|
||||
replace:
|
||||
path: /usr/share/jitsi-meet/interface_config.js
|
||||
regexp: "'firefox',"
|
||||
replace: ""
|
||||
- include_tasks: sys_conf.yml
|
||||
- include_tasks: jitsi_install.yml
|
||||
- include_tasks: jitsi_conf.yml
|
||||
|
||||
@@ -0,0 +1,32 @@
|
||||
---
|
||||
- name: Installation de fail2ban
|
||||
apt:
|
||||
name: fail2ban
|
||||
|
||||
- name: Appliquation des règles de ban
|
||||
template:
|
||||
src: ../files/jail.conf
|
||||
dest: /etc/fail2ban/jail.d/jail.conf
|
||||
notify:
|
||||
- restart fail2ban
|
||||
|
||||
- name: Création du répertoire pour la surcharge systemd
|
||||
file:
|
||||
name: /etc/systemd/system/fail2ban.service.d
|
||||
state: directory
|
||||
|
||||
- name: Règle de base pour nftables
|
||||
template:
|
||||
src: ../files/service-override.conf
|
||||
dest: /etc/systemd/system/fail2ban.service.d/override.conf
|
||||
notify:
|
||||
- restart fail2ban
|
||||
|
||||
- name: Déploiement des règles nftables (base)
|
||||
tags:
|
||||
- nftables
|
||||
template:
|
||||
src: ../files/nftables.conf
|
||||
dest: /etc/nftables.conf
|
||||
notify:
|
||||
- reload nftables
|
||||
Reference in New Issue
Block a user