This commit is contained in:
Antoine Ouvrard
2021-05-17 10:31:00 +02:00
parent 7442828ccd
commit db573babed
13 changed files with 19 additions and 14 deletions
+1
View File
@@ -1,3 +1,4 @@
---
default: default:
before_script: before_script:
- pip3 install --user "ansible-lint[core,yamllint]" - pip3 install --user "ansible-lint[core,yamllint]"
-1
View File
@@ -5,4 +5,3 @@
state: restarted state: restarted
daemon_reload: true daemon_reload: true
enabled: true enabled: true
+4 -1
View File
@@ -1,10 +1,12 @@
---
- name: Installation de snapd - name: Installation de snapd
apt: apt:
name: name:
- snapd - snapd
state: present state: present
- name: Initialisation de snap et installtion de certbot (prendre bien 5min, soyez patient) - name: Initialisation de snap et installtion de certbot
(prend bien 5min, soyez patient)
command: "{{ item }}" command: "{{ item }}"
loop: loop:
- snap install core - snap install core
@@ -12,4 +14,5 @@
- snap install --classic certbot - snap install --classic certbot
- name: Création du certificat SSL - name: Création du certificat SSL
# yamllint disable-line rule:line-length
command: /snap/bin/certbot certonly --standalone -d {{ inventory_hostname }} -m supervision@nereide.fr --agree-tos --non-interactive command: /snap/bin/certbot certonly --standalone -d {{ inventory_hostname }} -m supervision@nereide.fr --agree-tos --non-interactive
+2 -4
View File
@@ -26,7 +26,7 @@
owner: turnserver owner: turnserver
group: turnserver group: turnserver
state: directory state: directory
recurse: yes recurse: true
loop: loop:
- /etc/letsencrypt/live - /etc/letsencrypt/live
- /etc/letsencrypt/archive - /etc/letsencrypt/archive
@@ -40,10 +40,8 @@
- name: Ajout des capabilities à coturn - name: Ajout des capabilities à coturn
lineinfile: lineinfile:
path: /etc/systemd/system/coturn.service.d/override.conf path: /etc/systemd/system/coturn.service.d/override.conf
create: yes create: true
line: | line: |
[Service] [Service]
AmbientCapabilities=CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_BIND_SERVICE
notify: restart coturn notify: restart coturn
@@ -18,7 +18,8 @@
state: directory state: directory
path: /usr/local/bin/ path: /usr/local/bin/
mode: 0644 mode: 0644
- name: "télécharge de chromedriver pour la version {{ _latest_release.content }}" - name: "télécharge de chromedriver pour la version
{{ _latest_release.content }}"
unarchive: unarchive:
src: "http://chromedriver.storage.googleapis.com/{{ _latest_release.content }}/chromedriver_linux64.zip" src: "http://chromedriver.storage.googleapis.com/{{ _latest_release.content }}/chromedriver_linux64.zip"
dest: /usr/local/bin dest: /usr/local/bin
@@ -7,6 +7,7 @@
- name: Ajout du depot google - name: Ajout du depot google
apt_repository: apt_repository:
# yamllint disable-line rule:line-length
repo: deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/google.gpg] http://dl.google.com/linux/chrome/deb/ stable main repo: deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/google.gpg] http://dl.google.com/linux/chrome/deb/ stable main
update_cache: true update_cache: true
filename: google-chrome filename: google-chrome
@@ -17,6 +17,7 @@
- name: Ajout du depot jitsi - name: Ajout du depot jitsi
apt_repository: apt_repository:
# yamllint disable-line rule:line-length
repo: deb [signed-by=/etc/apt/trusted.gpg.d/jitsi.gpg] https://download.jitsi.org stable/ repo: deb [signed-by=/etc/apt/trusted.gpg.d/jitsi.gpg] https://download.jitsi.org stable/
update_cache: true update_cache: true
@@ -44,6 +44,7 @@
replace: replace:
path: /etc/nginx/sites-available/{{ item }}.conf path: /etc/nginx/sites-available/{{ item }}.conf
regexp: regexp:
# yamllint disable-line rule:line-length
"[^?]ssl_certificate_key /etc/letsencrypt/live/{{ inventory_hostname }}.*$" "[^?]ssl_certificate_key /etc/letsencrypt/live/{{ inventory_hostname }}.*$"
replace: replace:
"ssl_certificate_key /etc/letsencrypt/live/{{ item }}/privkey.pem;" "ssl_certificate_key /etc/letsencrypt/live/{{ item }}/privkey.pem;"