Antoine Ouvrard
52 lines
1.3 KiB
YAML
52 lines
1.3 KiB
YAML
---
|
|
- name: Installation de sshguard, ufw
|
|
apt:
|
|
name:
|
|
- sshguard
|
|
- ufw
|
|
update_cache: true
|
|
state: present
|
|
|
|
- name: Mise en place des règle firewall tcp et udp
|
|
#source : https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart#setup-and-configure-your-firewall
|
|
ufw:
|
|
state: enabled
|
|
rule: allow
|
|
port: '{{ item[0] }}'
|
|
proto: '{{ item[1] }}'
|
|
loop:
|
|
- ['80','tcp']
|
|
- ['443','tcp']
|
|
- ['4443','tcp']
|
|
- ['22','tcp']
|
|
- ['10000','udp']
|
|
- ['3478','udp']
|
|
- ['5349','tcp']
|
|
- ['5222','tcp'] # XMPP port for recorder
|
|
|
|
- name: Ajout de la clé GPG pour le depot jitsi
|
|
apt_key:
|
|
url: http://download.jitsi.org/jitsi-key.gpg.key
|
|
|
|
- name: Ajout du depot jitsi
|
|
apt_repository:
|
|
repo: deb https://download.jitsi.org stable/
|
|
|
|
- name: apt update
|
|
apt:
|
|
update_cache: true
|
|
|
|
- name: Application du hostname avant installation
|
|
debconf:
|
|
name: jitsi-meet-web-config
|
|
question: jitsi-videobridge/jvb-hostname
|
|
value: '{{ inventory_hostname }}'
|
|
vtype: string
|
|
|
|
- name: On veut un certificat autogénéré
|
|
debconf:
|
|
name: jitsi-meet-web-config
|
|
question: jitsi-meet/cert-choice
|
|
value: "Generate a new self-signed certificate (You will later get a chance to obtain a Let's encrypt certificate)"
|
|
vtype: string
|