Add fail2ban role and clean up yaml lint noise
This commit is contained in:
@@ -1,16 +1,13 @@
|
||||
---
|
||||
language: python
|
||||
python: "2.7"
|
||||
python: '2.7'
|
||||
|
||||
# Use the new container infrastructure
|
||||
sudo: false
|
||||
|
||||
# Install ansible
|
||||
addons:
|
||||
apt:
|
||||
packages:
|
||||
- python-pip
|
||||
|
||||
packages: [python-pip]
|
||||
install:
|
||||
# Install ansible
|
||||
- pip install ansible
|
||||
@@ -20,10 +17,8 @@ install:
|
||||
|
||||
# Create ansible.cfg with correct roles_path
|
||||
- printf '[defaults]\nroles_path=../' >ansible.cfg
|
||||
|
||||
script:
|
||||
# Basic role syntax check
|
||||
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
|
||||
|
||||
notifications:
|
||||
webhooks: https://galaxy.ansible.com/api/v1/notifications/
|
||||
webhooks: https://galaxy.ansible.com/api/v1/notifications/
|
||||
|
||||
@@ -1,17 +1,17 @@
|
||||
---
|
||||
# handlers file for ensure_mariadb
|
||||
- name: 'ensure_mariadb.package_facts'
|
||||
- name: ensure_mariadb.package_facts
|
||||
ansible.builtin.package_facts:
|
||||
- name: 'ensure_mariadb.service_facts'
|
||||
- name: ensure_mariadb.service_facts
|
||||
ansible.builtin.service_facts:
|
||||
- name: 'ensure_mariadb.service_reload'
|
||||
- name: ensure_mariadb.service_reload
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ansible_facts["service_mgr"] == 'systemd'
|
||||
- ensure_mariadb is defined
|
||||
ansible.builtin.systemd:
|
||||
daemon_reload: 'yes'
|
||||
- name: 'ensure_mariadb.service_restart'
|
||||
- name: ensure_mariadb.service_restart
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_mariadb is defined
|
||||
@@ -21,8 +21,7 @@
|
||||
ansible.builtin.service:
|
||||
enabled: '{{ item.enabled }}'
|
||||
name: '{{ item.name }}'
|
||||
state: 'restarted'
|
||||
state: restarted
|
||||
loop: '{{ ensure_mariadb.service_list }}'
|
||||
loop_control:
|
||||
label: '{{ item.name }} will be restarted'
|
||||
...
|
||||
|
||||
@@ -1,3 +1,4 @@
|
||||
---
|
||||
galaxy_info:
|
||||
author: Jason Rothstein
|
||||
description: Deploy MariaDB
|
||||
@@ -15,7 +16,6 @@ galaxy_info:
|
||||
# - Apache-2.0
|
||||
# - CC-BY-4.0
|
||||
license: LGPL-3.0-or-later
|
||||
|
||||
min_ansible_version: 2.9
|
||||
|
||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||
@@ -38,7 +38,6 @@ galaxy_info:
|
||||
# - 1.0
|
||||
# - 7
|
||||
# - 99.99
|
||||
|
||||
galaxy_tags: []
|
||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||
@@ -46,8 +45,6 @@ galaxy_info:
|
||||
#
|
||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||
# Maximum 20 tags per role.
|
||||
|
||||
dependencies: []
|
||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||
# if you add dependencies to this list.
|
||||
|
||||
|
||||
+161
-164
@@ -1,116 +1,118 @@
|
||||
---
|
||||
# tasks file for ensure_mariadb
|
||||
- name: "include variables"
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- name: include variables
|
||||
when: ["ansible_facts[\"system\"] == 'Linux'"]
|
||||
ansible.builtin.include_vars:
|
||||
file: '{{ lookup("first_found", findme) }}'
|
||||
name: "ensure_mariadb"
|
||||
name: ensure_mariadb
|
||||
vars:
|
||||
findme:
|
||||
files:
|
||||
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
|
||||
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
|
||||
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
|
||||
}}-{{ ansible_facts["architecture"] }}.yml'
|
||||
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
|
||||
}}-default.yml'
|
||||
- '{{ ansible_facts["distribution"] }}-default.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
|
||||
}}-{{ ansible_facts["architecture"] }}.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
|
||||
}}-default.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-default.yml'
|
||||
- "default.yml"
|
||||
paths:
|
||||
- "../vars/"
|
||||
errors: "ignore"
|
||||
- name: "package discovery"
|
||||
- default.yml
|
||||
paths: [../vars/]
|
||||
errors: ignore
|
||||
- name: package discovery
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ansible_facts["packages"] is not defined
|
||||
ansible.builtin.package_facts:
|
||||
- name: "service discovery"
|
||||
- name: service discovery
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ansible_facts["services"] is not defined
|
||||
ansible.builtin.service_facts:
|
||||
- name: "ensure sysctl"
|
||||
- name: ensure sysctl
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_mariadb is defined
|
||||
- ensure_mariadb.sysctl_list is defined
|
||||
- ensure_mariadb.sysctl_list is iterable
|
||||
ansible.posix.sysctl:
|
||||
name: "{{ item.name }}"
|
||||
reload: "{{ item.reload | default(omit) }}"
|
||||
state: "{{ item.state }}"
|
||||
sysctl_file: "{{ item.sysctl_file | default(omit) }}"
|
||||
sysctl_set: "{{ item.sysctl_set | default(omit) }}"
|
||||
value: "{{ item.value | default(omit) }}"
|
||||
loop: "{{ ensure_mariadb.sysctl_list }}"
|
||||
name: '{{ item.name }}'
|
||||
reload: '{{ item.reload | default(omit) }}'
|
||||
state: '{{ item.state }}'
|
||||
sysctl_file: '{{ item.sysctl_file | default(omit) }}'
|
||||
sysctl_set: '{{ item.sysctl_set | default(omit) }}'
|
||||
value: '{{ item.value | default(omit) }}'
|
||||
loop: '{{ ensure_mariadb.sysctl_list }}'
|
||||
loop_control:
|
||||
label: "{{ item.name }} will be {{ item.value }}"
|
||||
label: '{{ item.name }} will be {{ item.value }}'
|
||||
notify:
|
||||
- "ensure_mariadb.package_facts"
|
||||
- "ensure_mariadb.service_facts"
|
||||
- "ensure_mariadb.service_reload"
|
||||
- "ensure_mariadb.service_restart"
|
||||
- name: "ensure packages"
|
||||
- ensure_mariadb.package_facts
|
||||
- ensure_mariadb.service_facts
|
||||
- ensure_mariadb.service_reload
|
||||
- ensure_mariadb.service_restart
|
||||
- name: ensure packages
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_mariadb is defined
|
||||
- ensure_mariadb.package_list is defined
|
||||
- ensure_mariadb.package_list is iterable
|
||||
ansible.builtin.package:
|
||||
name: "{{ item.name }}"
|
||||
state: "{{ item.state }}"
|
||||
loop: "{{ ensure_mariadb.package_list }}"
|
||||
name: '{{ item.name }}'
|
||||
state: '{{ item.state }}'
|
||||
loop: '{{ ensure_mariadb.package_list }}'
|
||||
loop_control:
|
||||
label: "{{ item.name }} will be {{ item.state }}"
|
||||
label: '{{ item.name }} will be {{ item.state }}'
|
||||
notify:
|
||||
- "ensure_mariadb.package_facts"
|
||||
- "ensure_mariadb.service_facts"
|
||||
- "ensure_mariadb.service_reload"
|
||||
- "ensure_mariadb.service_restart"
|
||||
- name: "ensure seboolean"
|
||||
- ensure_mariadb.package_facts
|
||||
- ensure_mariadb.service_facts
|
||||
- ensure_mariadb.service_reload
|
||||
- ensure_mariadb.service_restart
|
||||
- name: ensure seboolean
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_mariadb is defined
|
||||
- ensure_mariadb.seboolean_list is defined
|
||||
- ensure_mariadb.seboolean_list is iterable
|
||||
ansible.posix.seboolean:
|
||||
name: "{{ item.name }}"
|
||||
persistent: "{{ item.persistent }}"
|
||||
state: "{{ item.state }}"
|
||||
loop: "{{ ensure_mariadb.seboolean_list }}"
|
||||
name: '{{ item.name }}'
|
||||
persistent: '{{ item.persistent }}'
|
||||
state: '{{ item.state }}'
|
||||
loop: '{{ ensure_mariadb.seboolean_list }}'
|
||||
loop_control:
|
||||
label: "{{ item.name }} will be {{ item.state }}"
|
||||
label: '{{ item.name }} will be {{ item.state }}'
|
||||
notify:
|
||||
- "ensure_mariadb.package_facts"
|
||||
- "ensure_mariadb.service_facts"
|
||||
- "ensure_mariadb.service_reload"
|
||||
- "ensure_mariadb.service_restart"
|
||||
- name: "ensure configurations"
|
||||
- ensure_mariadb.package_facts
|
||||
- ensure_mariadb.service_facts
|
||||
- ensure_mariadb.service_reload
|
||||
- ensure_mariadb.service_restart
|
||||
- name: ensure configurations
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_mariadb is defined
|
||||
- ensure_mariadb.template_list is defined
|
||||
- ensure_mariadb.template_list is iterable
|
||||
ansible.builtin.template:
|
||||
backup: "no"
|
||||
dest: "{{ item.dest }}"
|
||||
group: "{{ item.group | default(omit) }}"
|
||||
mode: "{{ item.mode | default(omit) }}"
|
||||
owner: "{{ item.owner | default(omit) }}"
|
||||
selevel: "{{ iteml.selevel | default(omit) }}"
|
||||
serole: "{{ item.serole | default(omit) }}"
|
||||
setype: "{{ item.setype | default(omit) }}"
|
||||
seuser: "{{ item.seuser | default(omit) }}"
|
||||
src: "{{ item.src }}"
|
||||
loop: "{{ ensure_mariadb.template_list }}"
|
||||
backup: 'no'
|
||||
dest: '{{ item.dest }}'
|
||||
group: '{{ item.group | default(omit) }}'
|
||||
mode: '{{ item.mode | default(omit) }}'
|
||||
owner: '{{ item.owner | default(omit) }}'
|
||||
selevel: '{{ iteml.selevel | default(omit) }}'
|
||||
serole: '{{ item.serole | default(omit) }}'
|
||||
setype: '{{ item.setype | default(omit) }}'
|
||||
seuser: '{{ item.seuser | default(omit) }}'
|
||||
src: '{{ item.src }}'
|
||||
loop: '{{ ensure_mariadb.template_list }}'
|
||||
loop_control:
|
||||
label: "{{ item.dest }} will be ensured"
|
||||
label: '{{ item.dest }} will be ensured'
|
||||
notify:
|
||||
- "ensure_mariadb.package_facts"
|
||||
- "ensure_mariadb.service_facts"
|
||||
- "ensure_mariadb.service_reload"
|
||||
- "ensure_mariadb.service_restart"
|
||||
- name: "ensure firewall"
|
||||
- ensure_mariadb.package_facts
|
||||
- ensure_mariadb.service_facts
|
||||
- ensure_mariadb.service_reload
|
||||
- ensure_mariadb.service_restart
|
||||
- name: ensure firewall
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ansible_facts.packages["firewalld"] is defined
|
||||
@@ -119,117 +121,112 @@
|
||||
- ensure_mariadb.firewall_list is defined
|
||||
- ensure_mariadb.firewall_list is iterable
|
||||
ansible.posix.firewalld:
|
||||
permanent: "{{ item.permanent }}"
|
||||
service: "{{ item.service }}"
|
||||
state: "{{ item.state }}"
|
||||
loop: "{{ ensure_mariadb.firewall_list }}"
|
||||
permanent: '{{ item.permanent }}'
|
||||
service: '{{ item.service }}'
|
||||
state: '{{ item.state }}'
|
||||
loop: '{{ ensure_mariadb.firewall_list }}'
|
||||
loop_control:
|
||||
label: "{{ item.service }} will be {{ item.state }}"
|
||||
label: '{{ item.service }} will be {{ item.state }}'
|
||||
notify:
|
||||
- "ensure_mariadb.package_facts"
|
||||
- "ensure_mariadb.service_facts"
|
||||
- "ensure_mariadb.service_reload"
|
||||
- "ensure_mariadb.service_restart"
|
||||
- name: "ensure services"
|
||||
- ensure_mariadb.package_facts
|
||||
- ensure_mariadb.service_facts
|
||||
- ensure_mariadb.service_reload
|
||||
- ensure_mariadb.service_restart
|
||||
- name: ensure services
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_mariadb is defined
|
||||
- ensure_mariadb.service_list is defined
|
||||
- ensure_mariadb.service_list is iterable
|
||||
ansible.builtin.service:
|
||||
enabled: "{{ item.enabled }}"
|
||||
name: "{{ item.name }}"
|
||||
state: "{{ item.state }}"
|
||||
loop: "{{ ensure_mariadb.service_list }}"
|
||||
enabled: '{{ item.enabled }}'
|
||||
name: '{{ item.name }}'
|
||||
state: '{{ item.state }}'
|
||||
loop: '{{ ensure_mariadb.service_list }}'
|
||||
loop_control:
|
||||
label: "{{ item.name }} will be {{ item.state }}"
|
||||
label: '{{ item.name }} will be {{ item.state }}'
|
||||
notify:
|
||||
- "ensure_mariadb.package_facts"
|
||||
- "ensure_mariadb.service_facts"
|
||||
- "ensure_mariadb.service_reload"
|
||||
- "ensure_mariadb.service_restart"
|
||||
- name: "flush handlers"
|
||||
ansible.builtin.meta: "flush_handlers"
|
||||
- name: "ensure mariadb databases"
|
||||
when:
|
||||
- mariadb_db_list is defined
|
||||
- mariadb_db_list is iterable
|
||||
- ensure_mariadb.package_facts
|
||||
- ensure_mariadb.service_facts
|
||||
- ensure_mariadb.service_reload
|
||||
- ensure_mariadb.service_restart
|
||||
- name: flush handlers
|
||||
ansible.builtin.meta: flush_handlers
|
||||
- name: ensure mariadb databases
|
||||
when: [mariadb_db_list is defined, mariadb_db_list is iterable]
|
||||
ansible.mysql.mysql_db:
|
||||
ca_cert: "{{ item.ca_cert | default(omit) }}"
|
||||
chdir: "{{ item.chdir | default(omit) }}"
|
||||
check_hostname: "{{ item.check_hostname | default(omit) }}"
|
||||
client_cert: "{{ item.client_cert | default(omit) }}"
|
||||
client_key: "{{ item.client_key | default(omit) }}"
|
||||
collation: "{{ item.collation | default(omit) }}"
|
||||
config_file: "{{ item.config_file | default(omit) }}"
|
||||
config_overrides_defaults: "{{ item.config_overrides_defaults | default(omit) }}"
|
||||
connect_timeout: "{{ item.connect_timeout | default(omit) }}"
|
||||
dump_extra_args: "{{ item.dump_extra_args | default(omit) }}"
|
||||
encoding: "{{ item.encoding | default(omit) }}"
|
||||
force: "{{ item.force | default(omit) }}"
|
||||
hex_blob: "{{ item.hex_blob | default(omit) }}"
|
||||
ignore_tables: "{{ item.ignore_tables | default(omit) }}"
|
||||
login_host: "{{ item.login_host | default(omit) }}"
|
||||
login_password: "{{ item.login_password | default(omit) }}"
|
||||
login_port: "{{ item.login_port | default(omit) }}"
|
||||
login_unix_socket: "{{ item.login_unix_socket | default(omit) }}"
|
||||
login_user: "{{ item.login_user | default(omit) }}"
|
||||
master_data: "{{ item.master_data | default(omit) }}"
|
||||
name: "{{ item.name }}"
|
||||
pipefail: "{{ item.pipefail | default(omit) }}"
|
||||
quick: "{{ item.quick | default(omit) }}"
|
||||
restrict_config_file: "{{ item.restrict_config_file | default(omit) }}"
|
||||
single_transaction: "{{ item.single_transaction | default(omit) }}"
|
||||
skip_lock_tables: "{{ item.skip_lock_tables | default(omit) }}"
|
||||
sql_log_bin: "{{ item.sql_log_bin | default(omit) }}"
|
||||
state: "{{ item.state }}"
|
||||
target: "{{ item.target | default(omit) }}"
|
||||
unsafe_login_password: "{{ item.unsafe_login_password | default(omit) }}"
|
||||
use_shell: "{{ item.use_shell | default(omit) }}"
|
||||
loop: "{{ mariadb_db_list }}"
|
||||
ca_cert: '{{ item.ca_cert | default(omit) }}'
|
||||
chdir: '{{ item.chdir | default(omit) }}'
|
||||
check_hostname: '{{ item.check_hostname | default(omit) }}'
|
||||
client_cert: '{{ item.client_cert | default(omit) }}'
|
||||
client_key: '{{ item.client_key | default(omit) }}'
|
||||
collation: '{{ item.collation | default(omit) }}'
|
||||
config_file: '{{ item.config_file | default(omit) }}'
|
||||
config_overrides_defaults: '{{ item.config_overrides_defaults | default(omit) }}'
|
||||
connect_timeout: '{{ item.connect_timeout | default(omit) }}'
|
||||
dump_extra_args: '{{ item.dump_extra_args | default(omit) }}'
|
||||
encoding: '{{ item.encoding | default(omit) }}'
|
||||
force: '{{ item.force | default(omit) }}'
|
||||
hex_blob: '{{ item.hex_blob | default(omit) }}'
|
||||
ignore_tables: '{{ item.ignore_tables | default(omit) }}'
|
||||
login_host: '{{ item.login_host | default(omit) }}'
|
||||
login_password: '{{ item.login_password | default(omit) }}'
|
||||
login_port: '{{ item.login_port | default(omit) }}'
|
||||
login_unix_socket: '{{ item.login_unix_socket | default(omit) }}'
|
||||
login_user: '{{ item.login_user | default(omit) }}'
|
||||
master_data: '{{ item.master_data | default(omit) }}'
|
||||
name: '{{ item.name }}'
|
||||
pipefail: '{{ item.pipefail | default(omit) }}'
|
||||
quick: '{{ item.quick | default(omit) }}'
|
||||
restrict_config_file: '{{ item.restrict_config_file | default(omit) }}'
|
||||
single_transaction: '{{ item.single_transaction | default(omit) }}'
|
||||
skip_lock_tables: '{{ item.skip_lock_tables | default(omit) }}'
|
||||
sql_log_bin: '{{ item.sql_log_bin | default(omit) }}'
|
||||
state: '{{ item.state }}'
|
||||
target: '{{ item.target | default(omit) }}'
|
||||
unsafe_login_password: '{{ item.unsafe_login_password | default(omit) }}'
|
||||
use_shell: '{{ item.use_shell | default(omit) }}'
|
||||
loop: '{{ mariadb_db_list }}'
|
||||
loop_control:
|
||||
label: "{{ item.name }} will be {{ item.state }}"
|
||||
- name: "ensure mariadb users"
|
||||
when:
|
||||
- mariadb_user_list is defined
|
||||
- mariadb_user_list is iterable
|
||||
label: '{{ item.name }} will be {{ item.state }}'
|
||||
- name: ensure mariadb users
|
||||
when: [mariadb_user_list is defined, mariadb_user_list is iterable]
|
||||
ansible.mysql.mysql_user:
|
||||
append_privs: "{{ item.append_privs | default(omit) }}"
|
||||
attributes: "{{ item.attributes | default(omit) }}"
|
||||
ca_cert: "{{ item.ca_cert | default(omit) }}"
|
||||
check_hostname: "{{ item.check_hostname | default(omit) }}"
|
||||
client_cert: "{{ item.client_cert | default(omit) }}"
|
||||
client_key: "{{ item.client_key | default(omit) }}"
|
||||
column_case_sensitive: "{{ item.column_case_sensitive | default(omit) }}"
|
||||
config_file: "{{ item.config_file | default(omit) }}"
|
||||
connect_timeout: "{{ item.connect_timeout | default(omit) }}"
|
||||
encrypted: "{{ item.encrypted | default(omit) }}"
|
||||
force_context: "{{ item.force_context | default(omit) }}"
|
||||
host: "{{ item.host | default(omit) }}"
|
||||
host_all: "{{ item.host_all | default(omit) }}"
|
||||
locked: "{{ item.locked | default(omit) }}"
|
||||
login_host: "{{ item.login_host | default(omit) }}"
|
||||
login_password: "{{ item.login_password | default(omit) }}"
|
||||
login_port: "{{ item.login_port | default(omit) }}"
|
||||
login_unix_socket: "{{ item.login_unix_socket | default(omit) }}"
|
||||
login_user: "{{ item.login_user | default(omit) }}"
|
||||
name: "{{ item.name }}"
|
||||
password: "{{ item.password | default(omit) }}"
|
||||
password_expire: "{{ item.password_expire | default(omit) }}"
|
||||
password_expire_interval: "{{ item.password_expire_interval | default(omit) }}"
|
||||
plugin: "{{ item.plugin | default(omit) }}"
|
||||
plugin_auth_string: "{{ item.plugin_auth_string | default(omit) }}"
|
||||
plugin_hash_string: "{{ item.plugin_hash_string | default(omit) }}"
|
||||
priv: "{{ item.priv | default(omit) }}"
|
||||
resource_limits: "{{ item.resource_limits | default(omit) }}"
|
||||
salt: "{{ item.salt | default(omit) }}"
|
||||
session_vars: "{{ item.session_vars | default(omit) }}"
|
||||
sql_log_bin: "{{ item.sql_log_bin | default(omit) }}"
|
||||
state: "{{ item.state }}"
|
||||
subtract_privs: "{{ item.subtract_privs | default(omit) }}"
|
||||
tls_requires: "{{ item.tls_requires | default(omit) }}"
|
||||
update_password: "{{ item.update_password | default(omit) }}"
|
||||
loop: "{{ mariadb_user_list }}"
|
||||
append_privs: '{{ item.append_privs | default(omit) }}'
|
||||
attributes: '{{ item.attributes | default(omit) }}'
|
||||
ca_cert: '{{ item.ca_cert | default(omit) }}'
|
||||
check_hostname: '{{ item.check_hostname | default(omit) }}'
|
||||
client_cert: '{{ item.client_cert | default(omit) }}'
|
||||
client_key: '{{ item.client_key | default(omit) }}'
|
||||
column_case_sensitive: '{{ item.column_case_sensitive | default(omit) }}'
|
||||
config_file: '{{ item.config_file | default(omit) }}'
|
||||
connect_timeout: '{{ item.connect_timeout | default(omit) }}'
|
||||
encrypted: '{{ item.encrypted | default(omit) }}'
|
||||
force_context: '{{ item.force_context | default(omit) }}'
|
||||
host: '{{ item.host | default(omit) }}'
|
||||
host_all: '{{ item.host_all | default(omit) }}'
|
||||
locked: '{{ item.locked | default(omit) }}'
|
||||
login_host: '{{ item.login_host | default(omit) }}'
|
||||
login_password: '{{ item.login_password | default(omit) }}'
|
||||
login_port: '{{ item.login_port | default(omit) }}'
|
||||
login_unix_socket: '{{ item.login_unix_socket | default(omit) }}'
|
||||
login_user: '{{ item.login_user | default(omit) }}'
|
||||
name: '{{ item.name }}'
|
||||
password: '{{ item.password | default(omit) }}'
|
||||
password_expire: '{{ item.password_expire | default(omit) }}'
|
||||
password_expire_interval: '{{ item.password_expire_interval | default(omit) }}'
|
||||
plugin: '{{ item.plugin | default(omit) }}'
|
||||
plugin_auth_string: '{{ item.plugin_auth_string | default(omit) }}'
|
||||
plugin_hash_string: '{{ item.plugin_hash_string | default(omit) }}'
|
||||
priv: '{{ item.priv | default(omit) }}'
|
||||
resource_limits: '{{ item.resource_limits | default(omit) }}'
|
||||
salt: '{{ item.salt | default(omit) }}'
|
||||
session_vars: '{{ item.session_vars | default(omit) }}'
|
||||
sql_log_bin: '{{ item.sql_log_bin | default(omit) }}'
|
||||
state: '{{ item.state }}'
|
||||
subtract_privs: '{{ item.subtract_privs | default(omit) }}'
|
||||
tls_requires: '{{ item.tls_requires | default(omit) }}'
|
||||
update_password: '{{ item.update_password | default(omit) }}'
|
||||
loop: '{{ mariadb_user_list }}'
|
||||
loop_control:
|
||||
label: "{{ item.name }} will be {{ item.state }}"
|
||||
...
|
||||
label: '{{ item.name }} will be {{ item.state }}'
|
||||
|
||||
@@ -1,5 +1,4 @@
|
||||
---
|
||||
- hosts: localhost
|
||||
remote_user: root
|
||||
roles:
|
||||
- ensure_mariadb
|
||||
roles: [ensure_mariadb]
|
||||
|
||||
@@ -1,134 +1,152 @@
|
||||
---
|
||||
# vars file for ensure_mariadb
|
||||
package_list:
|
||||
- name: 'mariadb'
|
||||
state: 'present'
|
||||
- name: 'mariadb-server'
|
||||
state: 'present'
|
||||
- name: 'phpMyAdmin'
|
||||
state: 'present'
|
||||
- name: 'python3-PyMySQL'
|
||||
state: 'present'
|
||||
- name: mariadb
|
||||
state: present
|
||||
- name: mariadb-server
|
||||
state: present
|
||||
- name: phpMyAdmin
|
||||
state: present
|
||||
- name: python3-PyMySQL
|
||||
state: present
|
||||
firewall_list:
|
||||
- permanent: 'yes'
|
||||
service: 'mysql'
|
||||
state: 'enabled'
|
||||
service: mysql
|
||||
state: enabled
|
||||
service_list:
|
||||
- name: 'httpd.service'
|
||||
state: 'started'
|
||||
- name: httpd.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'httpd-reload.timer'
|
||||
state: 'started'
|
||||
- name: httpd-reload.timer
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'php-fpm.service'
|
||||
state: 'started'
|
||||
- name: php-fpm.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'mariadb-copytls.service'
|
||||
state: 'started'
|
||||
- name: mariadb-copytls.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'mariadb.service'
|
||||
state: 'started'
|
||||
- name: mariadb.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
template_list:
|
||||
- dest: '/etc/my.cnf.d/client.cnf'
|
||||
group: 'root'
|
||||
- dest: /etc/my.cnf.d/client.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/client.cnf'
|
||||
- dest: '/etc/my.cnf.d/mariadb-server.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/client.cnf'
|
||||
- dest: /etc/my.cnf.d/mariadb-server.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/mariadb-server.cnf'
|
||||
- dest: '/etc/my.cnf.d/mysql-clients.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/mariadb-server.cnf'
|
||||
- dest: /etc/my.cnf.d/mysql-clients.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/mysql-clients.cnf'
|
||||
- dest: '/etc/my.cnf.d/spider.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/mysql-clients.cnf'
|
||||
- dest: /etc/my.cnf.d/spider.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/spider.cnf'
|
||||
- dest: '/etc/my.cnf.d/enable_encryption.preset'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/spider.cnf'
|
||||
- dest: /etc/my.cnf.d/enable_encryption.preset
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/enable_encryption.preset'
|
||||
- dest: '/etc/my.cnf.d/cracklib_password_check.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/enable_encryption.preset'
|
||||
- dest: /etc/my.cnf.d/cracklib_password_check.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/cracklib_password_check.cnf'
|
||||
- dest: '/etc/my.cnf.d/auth_gssapi.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/cracklib_password_check.cnf'
|
||||
- dest: /etc/my.cnf.d/auth_gssapi.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/auth_gssapi.cnf'
|
||||
- dest: '/etc/my.cnf.d/hashicorp_key_management.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/auth_gssapi.cnf'
|
||||
- dest: /etc/my.cnf.d/hashicorp_key_management.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/hashicorp_key_management.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_bzip2.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/hashicorp_key_management.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_bzip2.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_bzip2.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_lz4.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_bzip2.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_lz4.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_lz4.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_lzma.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_lz4.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_lzma.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_lzma.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_lzo.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_lzma.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_lzo.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_lzo.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_snappy.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_lzo.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_snappy.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_snappy.cnf'
|
||||
- dest: '/etc/phpMyAdmin/config.inc.php'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_snappy.cnf'
|
||||
- dest: /etc/phpMyAdmin/config.inc.php
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/phpMyAdmin/config.inc.php'
|
||||
- dest: '/etc/my.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/phpMyAdmin/config.inc.php'
|
||||
- dest: /etc/my.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf'
|
||||
- dest: '/etc/httpd/conf.d/phpMyAdmin.conf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf'
|
||||
- dest: /etc/httpd/conf.d/phpMyAdmin.conf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.d/phpMyAdmin.conf'
|
||||
- dest: '/usr/lib/systemd/system/mariadb.service'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/httpd/conf.d/phpMyAdmin.conf'
|
||||
- dest: /usr/lib/systemd/system/mariadb.service
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb.service'
|
||||
- dest: '/usr/lib/systemd/system/mariadb@.service'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb.service'
|
||||
- dest: /usr/lib/systemd/system/mariadb@.service
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb@.service'
|
||||
- dest: '/usr/lib/systemd/system/mariadb-copytls.timer'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb@.service'
|
||||
- dest: /usr/lib/systemd/system/mariadb-copytls.timer
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb-copytls.timer'
|
||||
- dest: '/usr/lib/systemd/system/mariadb-copytls.service'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb-copytls.timer'
|
||||
- dest: /usr/lib/systemd/system/mariadb-copytls.service
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb-copytls.service'
|
||||
...
|
||||
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb-copytls.service'
|
||||
|
||||
@@ -1,134 +1,152 @@
|
||||
---
|
||||
# vars file for ensure_mariadb
|
||||
package_list:
|
||||
- name: 'mariadb'
|
||||
state: 'present'
|
||||
- name: 'mariadb-server'
|
||||
state: 'present'
|
||||
- name: 'phpMyAdmin'
|
||||
state: 'present'
|
||||
- name: 'python3-PyMySQL'
|
||||
state: 'present'
|
||||
- name: mariadb
|
||||
state: present
|
||||
- name: mariadb-server
|
||||
state: present
|
||||
- name: phpMyAdmin
|
||||
state: present
|
||||
- name: python3-PyMySQL
|
||||
state: present
|
||||
firewall_list:
|
||||
- permanent: 'yes'
|
||||
service: 'mysql'
|
||||
state: 'enabled'
|
||||
service: mysql
|
||||
state: enabled
|
||||
service_list:
|
||||
- name: 'httpd.service'
|
||||
state: 'started'
|
||||
- name: httpd.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'httpd-reload.timer'
|
||||
state: 'started'
|
||||
- name: httpd-reload.timer
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'php-fpm.service'
|
||||
state: 'started'
|
||||
- name: php-fpm.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'mariadb-copytls.service'
|
||||
state: 'started'
|
||||
- name: mariadb-copytls.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'mariadb.service'
|
||||
state: 'started'
|
||||
- name: mariadb.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
template_list:
|
||||
- dest: '/etc/my.cnf.d/client.cnf'
|
||||
group: 'root'
|
||||
- dest: /etc/my.cnf.d/client.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/client.cnf'
|
||||
- dest: '/etc/my.cnf.d/mariadb-server.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/client.cnf'
|
||||
- dest: /etc/my.cnf.d/mariadb-server.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/mariadb-server.cnf'
|
||||
- dest: '/etc/my.cnf.d/mysql-clients.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/mariadb-server.cnf'
|
||||
- dest: /etc/my.cnf.d/mysql-clients.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/mysql-clients.cnf'
|
||||
- dest: '/etc/my.cnf.d/spider.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/mysql-clients.cnf'
|
||||
- dest: /etc/my.cnf.d/spider.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/spider.cnf'
|
||||
- dest: '/etc/my.cnf.d/enable_encryption.preset'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/spider.cnf'
|
||||
- dest: /etc/my.cnf.d/enable_encryption.preset
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/enable_encryption.preset'
|
||||
- dest: '/etc/my.cnf.d/cracklib_password_check.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/enable_encryption.preset'
|
||||
- dest: /etc/my.cnf.d/cracklib_password_check.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/cracklib_password_check.cnf'
|
||||
- dest: '/etc/my.cnf.d/auth_gssapi.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/cracklib_password_check.cnf'
|
||||
- dest: /etc/my.cnf.d/auth_gssapi.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/auth_gssapi.cnf'
|
||||
- dest: '/etc/my.cnf.d/hashicorp_key_management.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/auth_gssapi.cnf'
|
||||
- dest: /etc/my.cnf.d/hashicorp_key_management.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/hashicorp_key_management.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_bzip2.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/hashicorp_key_management.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_bzip2.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_bzip2.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_lz4.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_bzip2.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_lz4.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_lz4.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_lzma.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_lz4.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_lzma.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_lzma.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_lzo.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_lzma.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_lzo.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_lzo.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_snappy.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_lzo.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_snappy.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_snappy.cnf'
|
||||
- dest: '/etc/phpMyAdmin/config.inc.php'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_snappy.cnf'
|
||||
- dest: /etc/phpMyAdmin/config.inc.php
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/phpMyAdmin/config.inc.php'
|
||||
- dest: '/etc/my.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/phpMyAdmin/config.inc.php'
|
||||
- dest: /etc/my.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf'
|
||||
- dest: '/etc/httpd/conf.d/phpMyAdmin.conf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf'
|
||||
- dest: /etc/httpd/conf.d/phpMyAdmin.conf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.d/phpMyAdmin.conf'
|
||||
- dest: '/usr/lib/systemd/system/mariadb.service'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/httpd/conf.d/phpMyAdmin.conf'
|
||||
- dest: /usr/lib/systemd/system/mariadb.service
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb.service'
|
||||
- dest: '/usr/lib/systemd/system/mariadb@.service'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb.service'
|
||||
- dest: /usr/lib/systemd/system/mariadb@.service
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb@.service'
|
||||
- dest: '/usr/lib/systemd/system/mariadb-copytls.timer'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb@.service'
|
||||
- dest: /usr/lib/systemd/system/mariadb-copytls.timer
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb-copytls.timer'
|
||||
- dest: '/usr/lib/systemd/system/mariadb-copytls.service'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb-copytls.timer'
|
||||
- dest: /usr/lib/systemd/system/mariadb-copytls.service
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb-copytls.service'
|
||||
...
|
||||
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb-copytls.service'
|
||||
|
||||
@@ -1,134 +1,152 @@
|
||||
---
|
||||
# vars file for ensure_mariadb
|
||||
package_list:
|
||||
- name: 'mariadb'
|
||||
state: 'present'
|
||||
- name: 'mariadb-server'
|
||||
state: 'present'
|
||||
- name: 'phpMyAdmin'
|
||||
state: 'present'
|
||||
- name: 'python3-PyMySQL'
|
||||
state: 'present'
|
||||
- name: mariadb
|
||||
state: present
|
||||
- name: mariadb-server
|
||||
state: present
|
||||
- name: phpMyAdmin
|
||||
state: present
|
||||
- name: python3-PyMySQL
|
||||
state: present
|
||||
firewall_list:
|
||||
- permanent: 'yes'
|
||||
service: 'mysql'
|
||||
state: 'enabled'
|
||||
service: mysql
|
||||
state: enabled
|
||||
service_list:
|
||||
- name: 'httpd.service'
|
||||
state: 'started'
|
||||
- name: httpd.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'httpd-reload.timer'
|
||||
state: 'started'
|
||||
- name: httpd-reload.timer
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'php-fpm.service'
|
||||
state: 'started'
|
||||
- name: php-fpm.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'mariadb-copytls.service'
|
||||
state: 'started'
|
||||
- name: mariadb-copytls.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
- name: 'mariadb.service'
|
||||
state: 'started'
|
||||
- name: mariadb.service
|
||||
state: started
|
||||
enabled: 'yes'
|
||||
template_list:
|
||||
- dest: '/etc/my.cnf.d/client.cnf'
|
||||
group: 'root'
|
||||
- dest: /etc/my.cnf.d/client.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/client.cnf'
|
||||
- dest: '/etc/my.cnf.d/mariadb-server.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/client.cnf'
|
||||
- dest: /etc/my.cnf.d/mariadb-server.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/mariadb-server.cnf'
|
||||
- dest: '/etc/my.cnf.d/mysql-clients.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/mariadb-server.cnf'
|
||||
- dest: /etc/my.cnf.d/mysql-clients.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/mysql-clients.cnf'
|
||||
- dest: '/etc/my.cnf.d/spider.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/mysql-clients.cnf'
|
||||
- dest: /etc/my.cnf.d/spider.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/spider.cnf'
|
||||
- dest: '/etc/my.cnf.d/enable_encryption.preset'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/spider.cnf'
|
||||
- dest: /etc/my.cnf.d/enable_encryption.preset
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/enable_encryption.preset'
|
||||
- dest: '/etc/my.cnf.d/cracklib_password_check.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/enable_encryption.preset'
|
||||
- dest: /etc/my.cnf.d/cracklib_password_check.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/cracklib_password_check.cnf'
|
||||
- dest: '/etc/my.cnf.d/auth_gssapi.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/cracklib_password_check.cnf'
|
||||
- dest: /etc/my.cnf.d/auth_gssapi.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/auth_gssapi.cnf'
|
||||
- dest: '/etc/my.cnf.d/hashicorp_key_management.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/auth_gssapi.cnf'
|
||||
- dest: /etc/my.cnf.d/hashicorp_key_management.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/hashicorp_key_management.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_bzip2.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/hashicorp_key_management.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_bzip2.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_bzip2.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_lz4.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_bzip2.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_lz4.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_lz4.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_lzma.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_lz4.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_lzma.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_lzma.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_lzo.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_lzma.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_lzo.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_lzo.cnf'
|
||||
- dest: '/etc/my.cnf.d/provider_snappy.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_lzo.cnf'
|
||||
- dest: /etc/my.cnf.d/provider_snappy.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf.d/provider_snappy.cnf'
|
||||
- dest: '/etc/phpMyAdmin/config.inc.php'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf.d/provider_snappy.cnf'
|
||||
- dest: /etc/phpMyAdmin/config.inc.php
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/phpMyAdmin/config.inc.php'
|
||||
- dest: '/etc/my.cnf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/phpMyAdmin/config.inc.php'
|
||||
- dest: /etc/my.cnf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/my.cnf'
|
||||
- dest: '/etc/httpd/conf.d/phpMyAdmin.conf'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/my.cnf'
|
||||
- dest: /etc/httpd/conf.d/phpMyAdmin.conf
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/etc/httpd/conf.d/phpMyAdmin.conf'
|
||||
- dest: '/usr/lib/systemd/system/mariadb.service'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/etc/httpd/conf.d/phpMyAdmin.conf'
|
||||
- dest: /usr/lib/systemd/system/mariadb.service
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb.service'
|
||||
- dest: '/usr/lib/systemd/system/mariadb@.service'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb.service'
|
||||
- dest: /usr/lib/systemd/system/mariadb@.service
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb@.service'
|
||||
- dest: '/usr/lib/systemd/system/mariadb-copytls.timer'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb@.service'
|
||||
- dest: /usr/lib/systemd/system/mariadb-copytls.timer
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb-copytls.timer'
|
||||
- dest: '/usr/lib/systemd/system/mariadb-copytls.service'
|
||||
group: 'root'
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb-copytls.timer'
|
||||
- dest: /usr/lib/systemd/system/mariadb-copytls.service
|
||||
group: root
|
||||
mode: '0644'
|
||||
owner: 'root'
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"] }}/usr/lib/systemd/system/mariadb-copytls.service'
|
||||
...
|
||||
|
||||
owner: root
|
||||
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
||||
}}/usr/lib/systemd/system/mariadb-copytls.service'
|
||||
|
||||
@@ -1,2 +1,2 @@
|
||||
---
|
||||
# vars file for ensure_mariadb
|
||||
...
|
||||
|
||||
@@ -1,2 +1,2 @@
|
||||
---
|
||||
# vars file for ensure_mariadb
|
||||
...
|
||||
|
||||
Reference in New Issue
Block a user