Resolve "execution des roles plus flexible"

2020-04-20 21:00:38 +02:00
parent 465876051e
commit dd883c8c1a
18 changed files with 106 additions and 170 deletions
@@ -0,0 +1,63 @@
+---
+- name: Installation de fail2ban, nftables, gnupg2, apt-transport-https
+  apt:
+    name:
+      - fail2ban
+      - nftables
+      - gnupg2
+      - apt-transport-https
+    update_cache: true
+    state: present
+
+- name: Appliquation des règles de ban ssh
+  template:
+    src: ../files/jail.conf
+    dest: /etc/fail2ban/jail.d/jail.conf
+  notify:
+    - restart fail2ban
+
+- name: Création du répertoire pour la surcharge systemd
+  file:
+    name: /etc/systemd/system/fail2ban.service.d
+    state: directory
+
+- name: Règle de base pour nftables
+  template:
+    src: ../files/fail2ban-override.conf
+    dest: /etc/systemd/system/fail2ban.service.d/override.conf
+
+- name: Déploiement des règles nftables (base)
+  tags:
+    - nftables
+  template:
+    src: ../files/nftables.conf
+    dest: /etc/nftables.conf
+  notify:
+    - restart nftables
+    - restart fail2ban
+
+- name: Ajout de la clé GPG pour le depot jitsi
+  apt_key:
+    url: http://download.jitsi.org/jitsi-key.gpg.key
+
+- name: Ajout du depot jitsi
+  apt_repository:
+    repo: deb https://download.jitsi.org stable/
+
+- name: apt update
+  apt:
+    update_cache: true
+
+- name: Application du hostname avant installation
+  debconf:
+    name: jitsi-meet-web-config
+    question: jitsi-videobridge/jvb-hostname
+    value: '{{ inventory_hostname }}'
+    vtype: string
+
+- name: On veut un certificat autogénéré
+  debconf:
+    name: jitsi-meet-web-config
+    question: jitsi-meet/cert-choice
+    value: "Generate a new self-signed certificate (You will later get a chance to obtain a Let's encrypt certificate)"
+    vtype: string