Add fail2ban role and clean up yaml lint noise
This commit is contained in:
@@ -1,3 +1,2 @@
|
||||
---
|
||||
# defaults file for ensure_rsync
|
||||
|
||||
...
|
||||
|
||||
@@ -1,17 +1,17 @@
|
||||
---
|
||||
# handlers file for ensure_rsync
|
||||
- name: 'ensure_rsync.package_facts'
|
||||
- name: ensure_rsync.package_facts
|
||||
ansible.builtin.package_facts:
|
||||
- name: 'ensure_rsync.service_facts'
|
||||
- name: ensure_rsync.service_facts
|
||||
ansible.builtin.service_facts:
|
||||
- name: 'ensure_rsync.service_reload'
|
||||
- name: ensure_rsync.service_reload
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ansible_facts["service_mgr"] == 'systemd'
|
||||
- ensure_rsync is defined
|
||||
ansible.builtin.systemd:
|
||||
daemon_reload: 'yes'
|
||||
- name: 'ensure_rsync.service_restart'
|
||||
- name: ensure_rsync.service_restart
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_rsync is defined
|
||||
@@ -21,9 +21,7 @@
|
||||
ansible.builtin.service:
|
||||
enabled: '{{ item.enabled }}'
|
||||
name: '{{ item.name }}'
|
||||
state: 'restarted'
|
||||
state: restarted
|
||||
loop: '{{ ensure_rsync.service_list }}'
|
||||
loop_control:
|
||||
label: '{{ item.name }} will be restarted'
|
||||
...
|
||||
|
||||
|
||||
@@ -1,3 +1,4 @@
|
||||
---
|
||||
galaxy_info:
|
||||
author: your name
|
||||
description: your role description
|
||||
@@ -15,7 +16,6 @@ galaxy_info:
|
||||
# - Apache-2.0
|
||||
# - CC-BY-4.0
|
||||
license: license (GPL-2.0-or-later, MIT, etc)
|
||||
|
||||
min_ansible_version: 2.9
|
||||
|
||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||
@@ -38,7 +38,6 @@ galaxy_info:
|
||||
# - 1.0
|
||||
# - 7
|
||||
# - 99.99
|
||||
|
||||
galaxy_tags: []
|
||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||
@@ -46,8 +45,6 @@ galaxy_info:
|
||||
#
|
||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||
# Maximum 20 tags per role.
|
||||
|
||||
dependencies: []
|
||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||
# if you add dependencies to this list.
|
||||
|
||||
@@ -1,35 +1,37 @@
|
||||
---
|
||||
# tasks file for ensure_rsync
|
||||
- name: 'include variables'
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- name: include variables
|
||||
when: ["ansible_facts[\"system\"] == 'Linux'"]
|
||||
ansible.builtin.include_vars:
|
||||
file: '{{ lookup("first_found", findme) }}'
|
||||
name: 'ensure_rsync'
|
||||
name: ensure_rsync
|
||||
vars:
|
||||
findme:
|
||||
files:
|
||||
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
|
||||
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
|
||||
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
|
||||
}}-{{ ansible_facts["architecture"] }}.yml'
|
||||
- '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"]
|
||||
}}-default.yml'
|
||||
- '{{ ansible_facts["distribution"] }}-default.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
|
||||
}}-{{ ansible_facts["architecture"] }}.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"]
|
||||
}}-default.yml'
|
||||
- '{{ ansible_facts["os_family"] }}-default.yml'
|
||||
- 'default.yml'
|
||||
paths:
|
||||
- '../vars/'
|
||||
errors: 'ignore'
|
||||
- name: 'package discovery'
|
||||
- default.yml
|
||||
paths: [../vars/]
|
||||
errors: ignore
|
||||
- name: package discovery
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ansible_facts["packages"] is not defined
|
||||
ansible.builtin.package_facts:
|
||||
- name: 'service discovery'
|
||||
- name: service discovery
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ansible_facts["services"] is not defined
|
||||
ansible.builtin.service_facts:
|
||||
- name: 'ensure packages'
|
||||
- name: ensure packages
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_rsync is defined
|
||||
@@ -41,10 +43,8 @@
|
||||
loop: '{{ ensure_rsync.package_list }}'
|
||||
loop_control:
|
||||
label: '{{ item.name }} will be {{ item.state }}'
|
||||
notify:
|
||||
- 'ensure_rsync.package_facts'
|
||||
- 'ensure_rsync.service_facts'
|
||||
- name: 'ensure configurations'
|
||||
notify: [ensure_rsync.package_facts, ensure_rsync.service_facts]
|
||||
- name: ensure configurations
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_rsync is defined
|
||||
@@ -65,11 +65,11 @@
|
||||
loop_control:
|
||||
label: '{{ item.dest }} will be ensured'
|
||||
notify:
|
||||
- 'ensure_rsync.package_facts'
|
||||
- 'ensure_rsync.service_facts'
|
||||
- 'ensure_rsync.service_reload'
|
||||
- 'ensure_rsync.service_restart'
|
||||
- name: 'ensure services'
|
||||
- ensure_rsync.package_facts
|
||||
- ensure_rsync.service_facts
|
||||
- ensure_rsync.service_reload
|
||||
- ensure_rsync.service_restart
|
||||
- name: ensure services
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_rsync is defined
|
||||
@@ -82,10 +82,8 @@
|
||||
loop: '{{ ensure_rsync.service_list }}'
|
||||
loop_control:
|
||||
label: '{{ item.name }} will be {{ item.state }}'
|
||||
notify:
|
||||
- 'ensure_rsync.package_facts'
|
||||
- 'ensure_rsync.service_facts'
|
||||
- name: 'Ensure SELinux is configured'
|
||||
notify: [ensure_rsync.package_facts, ensure_rsync.service_facts]
|
||||
- name: Ensure SELinux is configured
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_rsync is defined
|
||||
@@ -94,23 +92,23 @@
|
||||
ansible.posix.selinux:
|
||||
policy: '{{ ensure_rsync.selinux_policy }}'
|
||||
state: '{{ ensure_rsync.selinux_state }}'
|
||||
register: 'ensure_rsync_results'
|
||||
register: ensure_rsync_results
|
||||
notify:
|
||||
- 'ensure_rsync.package_facts'
|
||||
- 'ensure_rsync.service_facts'
|
||||
- 'ensure_rsync.service_reload'
|
||||
- 'ensure_rsync.service_restart'
|
||||
- name: 'Reboot if required'
|
||||
- ensure_rsync.package_facts
|
||||
- ensure_rsync.service_facts
|
||||
- ensure_rsync.service_reload
|
||||
- ensure_rsync.service_restart
|
||||
- name: Reboot if required
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_rsync is defined
|
||||
- ensure_rsync.selinux_policy is defined
|
||||
- ensure_rsync.selinux_state is defined # This line is correct, no change needed
|
||||
- ensure_rsync.selinux_state is defined # This line is correct, no change needed
|
||||
- ensure_rsync_results is defined
|
||||
- ensure_rsync_results.reboot_required is defined
|
||||
- ensure_rsync_results.reboot_required
|
||||
ansible.builtin.reboot:
|
||||
- name: 'ensure seboolean'
|
||||
- name: ensure seboolean
|
||||
when:
|
||||
- ansible_facts["system"] == 'Linux'
|
||||
- ensure_rsync is defined
|
||||
@@ -124,10 +122,9 @@
|
||||
loop_control:
|
||||
label: '{{ item.name }} will be {{ item.state }}'
|
||||
notify:
|
||||
- 'ensure_rsync.package_facts'
|
||||
- 'ensure_rsync.service_facts'
|
||||
- 'ensure_rsync.service_reload'
|
||||
- 'ensure_rsync.service_restart'
|
||||
- name: 'flush handlers'
|
||||
ansible.builtin.meta: 'flush_handlers'
|
||||
...
|
||||
- ensure_rsync.package_facts
|
||||
- ensure_rsync.service_facts
|
||||
- ensure_rsync.service_reload
|
||||
- ensure_rsync.service_restart
|
||||
- name: flush handlers
|
||||
ansible.builtin.meta: flush_handlers
|
||||
|
||||
@@ -1,5 +1,4 @@
|
||||
---
|
||||
- hosts: localhost
|
||||
remote_user: root
|
||||
roles:
|
||||
- ensure_rsync
|
||||
roles: [ensure_rsync]
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,7 +1,5 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
package_list:
|
||||
- name: 'rsync'
|
||||
state: 'present'
|
||||
...
|
||||
|
||||
- name: rsync
|
||||
state: present
|
||||
|
||||
@@ -1,2 +1,2 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
...
|
||||
|
||||
@@ -1,2 +1,2 @@
|
||||
---
|
||||
# vars file for ensure_rsync
|
||||
...
|
||||
|
||||
Reference in New Issue
Block a user