bigbang gestion des roles

playbook_prod.yml

@@ -15,11 +15,9 @@
   roles:
     - role: jitsi-pre-install
     - role: jitsi-install
-    - role: jitsi-enable-LE
+    - role: jitsi-post-install
     - role: jitsi-enable-stats
-    - role: jitsi-enable-fr-ln
+    - role: jitsi-enable-auth
-    - role: jitsi-enable-video-optimisation
-    - role: jitsi-add-logo
   tags:
     - nrd
 
@@ -27,9 +25,7 @@
   roles:
     - role: jitsi-pre-install
     - role: jitsi-install
-    - role: jitsi-enable-LE
+    - role: jitsi-post-install
-    - role: jitsi-enable-fr-ln
-    - role: jitsi-enable-video-optimisation
     - role: jitsi-enable-stats
       vars:
         hostname: visio443.champs-libres.be
@@ -39,8 +35,6 @@
 - hosts: jitsi.entrouvert.com
   roles:
     - role: jitsi-pre-install
-    - role: jitsi-enable-LE
+    - role: jitsi-post-install
-    - role: jitsi-enable-fr-ln
-    - role: jitsi-enable-video-optimisation
   tags:
     - eo

roles/jitsi-post-install/tasks/main.yml

@@ -0,0 +1,56 @@
+---
+- name: Conf let's encrypt - désactivation de la demande du mail de supervision 1/2
+  replace:
+    path: /usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh
+    regexp: "read EMAIL"
+    replace: "#read EMAIL"
+
+- name: Conf let's encrypt - désactivation de la demande du mail de supervision 1/2
+  lineinfile:
+    path: /usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh
+    insertafter: "#read EMAIL"
+    line: "EMAIL=supervision@nereide.fr"
+
+- name: Exécution du script lets encrypt
+  shell: /usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh >> jitsi-le.log
+
+- name: Conf Jitsi - UI en fr
+  lineinfile:
+    path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
+    insertafter: "[^?]// defaultLanguage: 'en'"
+    line: "    defaultLanguage: 'fr',"
+
+- name: Conf Jitsi - webcam en qualité medium par defaut 1/2
+  lineinfile:
+    path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
+    insertafter: "[^?]// resolution: 720"
+    line: "    resolution: 360,"
+
+- name:  Conf Jitsi - webcam en qualité medium par defaut 2/2
+  blockinfile:
+    path: /etc/jitsi/meet/{{ inventory_hostname }}-config.js
+    marker: "// {mark} ANSIBLE MANAGED BLOCK"
+    insertafter: "// ratio of 16:9 with an ideal resolution of 720."
+    block: |
+        constraints: {
+          video: {
+            aspectRatio: 16 / 9,
+            height: {
+              ideal: 360,
+              max: 360,
+              min: 240
+            }
+          }
+        },
+
+- name: Conf Jitsi - Désactive l'effet floutage d'arrière plan
+  replace:
+    path: /usr/share/jitsi-meet/interface_config.js
+    regexp: "'videobackgroundblur',"
+    replace: ""
+
+- name: Conf Jitsi - Active une alerte pour les utilisateurs de Firefox
+  replace:
+    path: /usr/share/jitsi-meet/interface_config.js
+    regexp: "'firefox',"
+    replace: ""

roles/jitsi-pre-install/files/service-override.conf

@@ -0,0 +1,7 @@
+[Unit]
+After=nftables.service
+PartOf=nftables.service
+
+[Service]
+ExecStartPre=nft add table inet filter
+ExecStartPre=nft add chain inet filter input { type filter hook input priority 0; policy accept; }

roles/jitsi-pre-install/tasks/main.yml

@@ -23,7 +23,7 @@
 
 - name: Règle de base pour nftables
   template:
-    src: ../files/fail2ban-override.conf
+    src: ../files/service-override.conf
     dest: /etc/systemd/system/fail2ban.service.d/override.conf
 
 - name: Déploiement des règles nftables (base)