Add fail2ban role and clean up yaml lint noise

This commit is contained in:
2026-08-08 23:50:32 -05:00
parent 9b837dd780
commit 6c7ecfc724
352 changed files with 4632 additions and 4186 deletions
+5 -6
View File
@@ -1,8 +1,7 @@
---
# defaults file for ensure_gitea
gitea_database_type: 'mysql'
gitea_database_host: 'localhost:3306'
gitea_database_name: 'gitea'
gitea_database_user: 'gitea'
gitea_database_pass: 'SuperSecretSquirrel'
gitea_database_type: mysql
gitea_database_host: localhost:3306
gitea_database_name: gitea
gitea_database_user: gitea
gitea_database_pass: SuperSecretSquirrel
+5 -6
View File
@@ -1,17 +1,17 @@
---
# handlers file for ensure_gitea
- name: 'ensure_gitea.package_facts'
- name: ensure_gitea.package_facts
ansible.builtin.package_facts:
- name: 'ensure_gitea.service_facts'
- name: ensure_gitea.service_facts
ansible.builtin.service_facts:
- name: 'ensure_gitea.service_reload'
- name: ensure_gitea.service_reload
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["service_mgr"] == 'systemd'
- ensure_gitea is defined
ansible.builtin.systemd:
daemon_reload: 'yes'
- name: 'ensure_gitea.service_restart'
- name: ensure_gitea.service_restart
when:
- ansible_facts["system"] == 'Linux'
- ensure_gitea is defined
@@ -21,8 +21,7 @@
ansible.builtin.service:
enabled: '{{ item.enabled }}'
name: '{{ item.name }}'
state: 'restarted'
state: restarted
loop: '{{ ensure_gitea.service_list }}'
loop_control:
label: '{{ item.name }} will be restarted'
...
+1 -4
View File
@@ -1,3 +1,4 @@
---
galaxy_info:
author: Jason Rothstein
description: Deploy MariaDB
@@ -15,7 +16,6 @@ galaxy_info:
# - Apache-2.0
# - CC-BY-4.0
license: LGPL-3.0-or-later
min_ansible_version: 2.9
# If this a Container Enabled role, provide the minimum Ansible Container version.
@@ -38,7 +38,6 @@ galaxy_info:
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
@@ -46,8 +45,6 @@ galaxy_info:
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.
+53 -53
View File
@@ -1,35 +1,37 @@
---
# tasks file for ensure_gitea
- name: 'include variables'
when:
- ansible_facts["system"] == 'Linux'
- name: include variables
when: ["ansible_facts[\"system\"] == 'Linux'"]
ansible.builtin.include_vars:
file: '{{ lookup("first_found", findme) }}'
name: 'ensure_gitea'
name: ensure_gitea
vars:
findme:
files:
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
}}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
}}-default.yml'
- '{{ ansible_facts["distribution"] }}-default.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
}}-{{ ansible_facts["architecture"] }}.yml'
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
}}-default.yml'
- '{{ ansible_facts["os_family"] }}-default.yml'
- 'default.yml'
paths:
- '../vars/'
errors: 'ignore'
- name: 'package discovery'
- default.yml
paths: [../vars/]
errors: ignore
- name: package discovery
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["packages"] is not defined
ansible.builtin.package_facts:
- name: 'service discovery'
- name: service discovery
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["services"] is not defined
ansible.builtin.service_facts:
- name: 'ensure yum repository'
- name: ensure yum repository
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts["pkg_mgr"] == 'dnf' or ansible_facts["pkg_mgr"] == 'dnf5'
@@ -88,11 +90,11 @@
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
notify:
- 'ensure_gitea.package_facts'
- 'ensure_gitea.service_facts'
- 'ensure_gitea.service_reload'
- 'ensure_gitea.service_restart'
- name: 'ensure sysctl'
- ensure_gitea.package_facts
- ensure_gitea.service_facts
- ensure_gitea.service_reload
- ensure_gitea.service_restart
- name: ensure sysctl
when:
- ansible_facts["system"] == 'Linux'
- ensure_gitea is defined
@@ -109,11 +111,11 @@
loop_control:
label: '{{ item.name }} will be {{ item.value }}'
notify:
- 'ensure_gitea.package_facts'
- 'ensure_gitea.service_facts'
- 'ensure_gitea.service_reload'
- 'ensure_gitea.service_restart'
- name: 'ensure packages'
- ensure_gitea.package_facts
- ensure_gitea.service_facts
- ensure_gitea.service_reload
- ensure_gitea.service_restart
- name: ensure packages
when:
- ansible_facts["system"] == 'Linux'
- ensure_gitea is defined
@@ -126,11 +128,11 @@
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
notify:
- 'ensure_gitea.package_facts'
- 'ensure_gitea.service_facts'
- 'ensure_gitea.service_reload'
- 'ensure_gitea.service_restart'
- name: 'ensure seboolean'
- ensure_gitea.package_facts
- ensure_gitea.service_facts
- ensure_gitea.service_reload
- ensure_gitea.service_restart
- name: ensure seboolean
when:
- ansible_facts["system"] == 'Linux'
- ensure_gitea is defined
@@ -144,11 +146,11 @@
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
notify:
- 'ensure_gitea.package_facts'
- 'ensure_gitea.service_facts'
- 'ensure_gitea.service_reload'
- 'ensure_gitea.service_restart'
- name: 'ensure configurations'
- ensure_gitea.package_facts
- ensure_gitea.service_facts
- ensure_gitea.service_reload
- ensure_gitea.service_restart
- name: ensure configurations
when:
- ansible_facts["system"] == 'Linux'
- ensure_gitea is defined
@@ -169,11 +171,11 @@
loop_control:
label: '{{ item.dest }} will be ensured'
notify:
- 'ensure_gitea.package_facts'
- 'ensure_gitea.service_facts'
- 'ensure_gitea.service_reload'
- 'ensure_gitea.service_restart'
- name: 'ensure firewall'
- ensure_gitea.package_facts
- ensure_gitea.service_facts
- ensure_gitea.service_reload
- ensure_gitea.service_restart
- name: ensure firewall
when:
- ansible_facts["system"] == 'Linux'
- ansible_facts.packages["firewalld"] is defined
@@ -189,11 +191,11 @@
loop_control:
label: '{{ item.service }} will be {{ item.state }}'
notify:
- 'ensure_gitea.package_facts'
- 'ensure_gitea.service_facts'
- 'ensure_gitea.service_reload'
- 'ensure_gitea.service_restart'
- name: 'ensure services'
- ensure_gitea.package_facts
- ensure_gitea.service_facts
- ensure_gitea.service_reload
- ensure_gitea.service_restart
- name: ensure services
when:
- ansible_facts["system"] == 'Linux'
- ensure_gitea is defined
@@ -207,11 +209,9 @@
loop_control:
label: '{{ item.name }} will be {{ item.state }}'
notify:
- 'ensure_gitea.package_facts'
- 'ensure_gitea.service_facts'
- 'ensure_gitea.service_reload'
- 'ensure_gitea.service_restart'
- name: 'flush handlers'
ansible.builtin.meta: 'flush_handlers'
...
- ensure_gitea.package_facts
- ensure_gitea.service_facts
- ensure_gitea.service_reload
- ensure_gitea.service_restart
- name: flush handlers
ansible.builtin.meta: flush_handlers
+1 -2
View File
@@ -1,5 +1,4 @@
---
- hosts: localhost
remote_user: root
roles:
- ensure_gitea
roles: [ensure_gitea]
+10 -11
View File
@@ -1,19 +1,18 @@
---
# vars file for ensure_gitea
package_list:
- name: 'gitea'
state: 'present'
- name: gitea
state: present
service_list:
- name: 'gitea.service'
state: 'started'
- name: gitea.service
state: started
enabled: 'yes'
yum_repository_list:
- name: 'gitea-fedorapackages-fedora'
baseurl: 'https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/'
description: 'FedoraPackages - Fire Dragon GIT Repository - fedora - {{ ansible_facts.distribution_major_version }} - {{ ansible_facts.architecture }}'
- name: gitea-fedorapackages-fedora
baseurl: https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/
description: FedoraPackages - Fire Dragon GIT Repository - fedora - {{ ansible_facts.distribution_major_version }}
- {{ ansible_facts.architecture }}
enabled: true
gpgcheck: false
gpgkey: 'https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/repository.key'
state: 'present'
...
gpgkey: https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/repository.key
state: present
+10 -11
View File
@@ -1,19 +1,18 @@
---
# vars file for ensure_gitea
package_list:
- name: 'gitea'
state: 'present'
- name: gitea
state: present
service_list:
- name: 'gitea.service'
state: 'started'
- name: gitea.service
state: started
enabled: 'yes'
yum_repository_list:
- name: 'gitea-fedorapackages-fedora'
baseurl: 'https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/'
description: 'FedoraPackages - Fire Dragon GIT Repository - fedora - {{ ansible_facts.distribution_major_version }} - {{ ansible_facts.architecture }}'
- name: gitea-fedorapackages-fedora
baseurl: https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/
description: FedoraPackages - Fire Dragon GIT Repository - fedora - {{ ansible_facts.distribution_major_version }}
- {{ ansible_facts.architecture }}
enabled: true
gpgcheck: false
gpgkey: 'https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/repository.key'
state: 'present'
...
gpgkey: https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/repository.key
state: present
+10 -11
View File
@@ -1,19 +1,18 @@
---
# vars file for ensure_gitea
package_list:
- name: 'gitea'
state: 'present'
- name: gitea
state: present
service_list:
- name: 'gitea.service'
state: 'started'
- name: gitea.service
state: started
enabled: 'yes'
yum_repository_list:
- name: 'gitea-fedorapackages-fedora'
baseurl: 'https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/'
description: 'FedoraPackages - Fire Dragon GIT Repository - fedora - {{ ansible_facts.distribution_major_version }} - {{ ansible_facts.architecture }}'
- name: gitea-fedorapackages-fedora
baseurl: https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/
description: FedoraPackages - Fire Dragon GIT Repository - fedora - {{ ansible_facts.distribution_major_version }}
- {{ ansible_facts.architecture }}
enabled: true
gpgcheck: false
gpgkey: 'https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/repository.key'
state: 'present'
...
gpgkey: https://gitea.fdragon.com/api/packages/Fedora-fc$releasever/rpm/repository.key
state: present
+1 -1
View File
@@ -1,2 +1,2 @@
---
# vars file for ensure_gitea
...
+1 -1
View File
@@ -1,2 +1,2 @@
---
# vars file for ensure_gitea
...