lint
This commit is contained in:
@@ -1,3 +1,4 @@
|
|||||||
|
---
|
||||||
default:
|
default:
|
||||||
before_script:
|
before_script:
|
||||||
- pip3 install --user "ansible-lint[core,yamllint]"
|
- pip3 install --user "ansible-lint[core,yamllint]"
|
||||||
|
|||||||
@@ -2,4 +2,4 @@
|
|||||||
bbb_sip_provider: sip5.ovh.fr
|
bbb_sip_provider: sip5.ovh.fr
|
||||||
bbb_sip_telnum_for_user: 0972552599
|
bbb_sip_telnum_for_user: 0972552599
|
||||||
bbb_sip_username: 0033972552599
|
bbb_sip_username: 0033972552599
|
||||||
bbb_sip_password: "{{ vault_bbb_EO_sip_password }}"
|
bbb_sip_password: "{{ vault_bbb_EO_sip_password }}"
|
||||||
|
|||||||
@@ -1,2 +1,2 @@
|
|||||||
---
|
---
|
||||||
coturn_secret: "{{ vault_coturn_secret }}"
|
coturn_secret: "{{ vault_coturn_secret }}"
|
||||||
|
|||||||
@@ -2,4 +2,4 @@
|
|||||||
jibri_user: "jibri1"
|
jibri_user: "jibri1"
|
||||||
jibri_password: "{{ vault_jibri1_komuniki }}"
|
jibri_password: "{{ vault_jibri1_komuniki }}"
|
||||||
jitsi_server_host: "jitsi2.komuniki.fr"
|
jitsi_server_host: "jitsi2.komuniki.fr"
|
||||||
jitsi_cookie_enabled: true
|
jitsi_cookie_enabled: true
|
||||||
|
|||||||
@@ -3,4 +3,4 @@ ansible_user: debian
|
|||||||
ansible_become: true
|
ansible_become: true
|
||||||
jigasi_sip_account: 0033972551042@sip5.ovh.fr
|
jigasi_sip_account: 0033972551042@sip5.ovh.fr
|
||||||
jigasi_sip_password: "{{ vault_jigasi_sip_password }}"
|
jigasi_sip_password: "{{ vault_jigasi_sip_password }}"
|
||||||
jigasi_sip_room: machineacafe
|
jigasi_sip_room: machineacafe
|
||||||
|
|||||||
@@ -1,4 +1,4 @@
|
|||||||
---
|
---
|
||||||
jibri_users:
|
jibri_users:
|
||||||
- user: "jibri1"
|
- user: "jibri1"
|
||||||
password: "{{ vault_jibri1_komuniki }}"
|
password: "{{ vault_jibri1_komuniki }}"
|
||||||
|
|||||||
@@ -5,4 +5,3 @@
|
|||||||
state: restarted
|
state: restarted
|
||||||
daemon_reload: true
|
daemon_reload: true
|
||||||
enabled: true
|
enabled: true
|
||||||
|
|
||||||
|
|||||||
@@ -1,10 +1,12 @@
|
|||||||
|
---
|
||||||
- name: Installation de snapd
|
- name: Installation de snapd
|
||||||
apt:
|
apt:
|
||||||
name:
|
name:
|
||||||
- snapd
|
- snapd
|
||||||
state: present
|
state: present
|
||||||
|
|
||||||
- name: Initialisation de snap et installtion de certbot (prendre bien 5min, soyez patient)
|
- name: Initialisation de snap et installtion de certbot
|
||||||
|
(prend bien 5min, soyez patient)
|
||||||
command: "{{ item }}"
|
command: "{{ item }}"
|
||||||
loop:
|
loop:
|
||||||
- snap install core
|
- snap install core
|
||||||
@@ -12,4 +14,5 @@
|
|||||||
- snap install --classic certbot
|
- snap install --classic certbot
|
||||||
|
|
||||||
- name: Création du certificat SSL
|
- name: Création du certificat SSL
|
||||||
command: /snap/bin/certbot certonly --standalone -d {{ inventory_hostname }} -m supervision@nereide.fr --agree-tos --non-interactive
|
# yamllint disable-line rule:line-length
|
||||||
|
command: /snap/bin/certbot certonly --standalone -d {{ inventory_hostname }} -m supervision@nereide.fr --agree-tos --non-interactive
|
||||||
|
|||||||
@@ -26,7 +26,7 @@
|
|||||||
owner: turnserver
|
owner: turnserver
|
||||||
group: turnserver
|
group: turnserver
|
||||||
state: directory
|
state: directory
|
||||||
recurse: yes
|
recurse: true
|
||||||
loop:
|
loop:
|
||||||
- /etc/letsencrypt/live
|
- /etc/letsencrypt/live
|
||||||
- /etc/letsencrypt/archive
|
- /etc/letsencrypt/archive
|
||||||
@@ -40,10 +40,8 @@
|
|||||||
- name: Ajout des capabilities à coturn
|
- name: Ajout des capabilities à coturn
|
||||||
lineinfile:
|
lineinfile:
|
||||||
path: /etc/systemd/system/coturn.service.d/override.conf
|
path: /etc/systemd/system/coturn.service.d/override.conf
|
||||||
create: yes
|
create: true
|
||||||
line: |
|
line: |
|
||||||
[Service]
|
[Service]
|
||||||
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||||||
notify: restart coturn
|
notify: restart coturn
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -18,7 +18,8 @@
|
|||||||
state: directory
|
state: directory
|
||||||
path: /usr/local/bin/
|
path: /usr/local/bin/
|
||||||
mode: 0644
|
mode: 0644
|
||||||
- name: "télécharge de chromedriver pour la version {{ _latest_release.content }}"
|
- name: "télécharge de chromedriver pour la version
|
||||||
|
{{ _latest_release.content }}"
|
||||||
unarchive:
|
unarchive:
|
||||||
src: "http://chromedriver.storage.googleapis.com/{{ _latest_release.content }}/chromedriver_linux64.zip"
|
src: "http://chromedriver.storage.googleapis.com/{{ _latest_release.content }}/chromedriver_linux64.zip"
|
||||||
dest: /usr/local/bin
|
dest: /usr/local/bin
|
||||||
|
|||||||
@@ -7,6 +7,7 @@
|
|||||||
|
|
||||||
- name: Ajout du depot google
|
- name: Ajout du depot google
|
||||||
apt_repository:
|
apt_repository:
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
repo: deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/google.gpg] http://dl.google.com/linux/chrome/deb/ stable main
|
repo: deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/google.gpg] http://dl.google.com/linux/chrome/deb/ stable main
|
||||||
update_cache: true
|
update_cache: true
|
||||||
filename: google-chrome
|
filename: google-chrome
|
||||||
|
|||||||
@@ -17,6 +17,7 @@
|
|||||||
|
|
||||||
- name: Ajout du depot jitsi
|
- name: Ajout du depot jitsi
|
||||||
apt_repository:
|
apt_repository:
|
||||||
|
# yamllint disable-line rule:line-length
|
||||||
repo: deb [signed-by=/etc/apt/trusted.gpg.d/jitsi.gpg] https://download.jitsi.org stable/
|
repo: deb [signed-by=/etc/apt/trusted.gpg.d/jitsi.gpg] https://download.jitsi.org stable/
|
||||||
update_cache: true
|
update_cache: true
|
||||||
|
|
||||||
|
|||||||
@@ -44,7 +44,8 @@
|
|||||||
replace:
|
replace:
|
||||||
path: /etc/nginx/sites-available/{{ item }}.conf
|
path: /etc/nginx/sites-available/{{ item }}.conf
|
||||||
regexp:
|
regexp:
|
||||||
"[^?]ssl_certificate_key /etc/letsencrypt/live/{{inventory_hostname}}.*$"
|
# yamllint disable-line rule:line-length
|
||||||
|
"[^?]ssl_certificate_key /etc/letsencrypt/live/{{ inventory_hostname }}.*$"
|
||||||
replace:
|
replace:
|
||||||
"ssl_certificate_key /etc/letsencrypt/live/{{ item }}/privkey.pem;"
|
"ssl_certificate_key /etc/letsencrypt/live/{{ item }}/privkey.pem;"
|
||||||
loop: "{{ jitsi_multidomain_domain }}"
|
loop: "{{ jitsi_multidomain_domain }}"
|
||||||
|
|||||||
Reference in New Issue
Block a user