AnsiblePlaybooks/test
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
828 Commits 1 Branch 0 Tags
master
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
jmrothst 1a58d3ff7c dav_lock_module removed because Fedora stopped packaging it 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-10-13 00:01:21 -05:00
jmrothst eb2dd37385 feat(ensure_apache): synchronize website content from local temp staging 
Replace remote git checkouts on target web nodes with an orchestrated
local staging and rsync deployment pipeline.

Recent OpenSSH updates in Fedora dropped agent forwarding into remote
sessions, breaking remote git fetch operations. Furthermore, pulling
directly from Git on production servers exposed .git repositories in
public webroots and required target servers to hold Git credentials.

- Create an ephemeral, unguessable local staging directory (0700) on
  localhost via ansible.builtin.tempfile scoped by inventory_hostname.
- Stage checkouts using repo hash prefixes to prevent collision when
  public and private servers share identical FQDNs.
- Execute shallow checkouts (depth: 1) on the control node using local
  credentials.
- Push website content to /srv/http/{fqdn}/ via ansible.posix.synchronize
  with checksum delta comparisons and automated cleanup (--delete).
- Introduce ensure_apache_rsync_excludes in role defaults to strip
  .git*, .env*, CI/CD pipelines (.gitea, .github), editor swap files,
  and OS metadata while preserving .htaccess and /.well-known/.
- Enforce httpd_sys_content_t SELinux context recursively across webroots.
- Guarantee staging directory cleanup on localhost via an always block.
 2026-09-07 23:35:05 -05:00
jmrothst 4078b0b064 refactor(roles): remove redundant post-task service and package assertions 
Eliminate post-verification discovery and assert tasks (service_facts
and package_facts) across all 19 roles and align AGENTS.md.

Ansible's built-in declarative modules (package, service) already enforce
target state natively and abort execution immediately on failure. The
subsequent assertion loops were redundant, added significant runtime
overhead, and produced false positives on non-service systemd units
(.socket, .timer) and service aliases (e.g., dbus.socket failing under
service_facts).

- Remove service_facts and Assert Managed Services Are Active across
  11 service roles (ensure_apache, ensure_cockpit, ensure_dbus,
  ensure_dovecot, ensure_fail2ban, ensure_firewalld, ensure_gitea,
  ensure_mariadb, ensure_podman, ensure_postfix, ensure_timezone).
- Remove package_facts and Assert Managed Packages Are Installed across
  8 package roles (ensure_ansible_prereq, ensure_git, ensure_os_patch,
  ensure_os_upgrade, ensure_repo_epel, ensure_repo_rpmfusion,
  ensure_rsync, ensure_vim).
- Update AGENTS.md Section 8.2, Section 10, and Section 21 to codify
  declarative state enforcement and prohibit redundant post-task
  assertion loops.
 2026-09-07 23:34:19 -05:00
jmrothst a81059d4e4 Roles only run on intended supported OS, and minor cleanup of when statements to match 2026-09-01 22:01:59 -05:00
jmrothst d38a19c9b5 Fix license and readme files 2026-09-01 21:48:28 -05:00
jmrothst 59c434a51d Agents, style, and editor 2026-09-01 21:46:43 -05:00
jmrothst 0d061f3ce7 More reload vs restart in dovecot role this time. 2026-08-15 21:42:48 -05:00
jmrothst cfbca7f333 Add missing fall through case 2026-08-11 00:34:15 -05:00
jmrothst 4f1a023c8d ansible-lint cleanups 2026-08-11 00:28:29 -05:00
jmrothst 8240771758 Add in place os upgrade for Debian and Ubuntu 2026-08-11 00:08:41 -05:00
jmrothst 0e18e3bdbb Yet another attempt to fix Oracle Linux vs EPEL 2026-08-10 23:08:42 -05:00
jmrothst 44dd3b642b Dovecot service restart vs reload 2026-08-10 22:49:29 -05:00
jmrothst 9c90a8e628 Remove the unsupported Fedora 42, and the soon to be unsupported Debian 11 2026-08-10 21:19:46 -05:00
jmrothst 3ecdc2af16 Dovecot to stop using PAM auth 2026-08-10 21:07:06 -05:00
jmrothst e6daee8d1e Enabling Spam Assassin 2026-08-10 21:06:33 -05:00
jmrothst fca5c83e4d Fix the name on all "name" tasks, but not name variables to pass ansible linting 2026-08-10 21:03:13 -05:00
jmrothst 306397517d yaml and ansible linting clean ups 2026-08-09 23:04:34 -05:00
jmrothst 6eb2875e44 Make OL get Fedora's EPEL but force it to lower priority over Oracle EPEL so that rpmfusion works, and we hopefully do not break OS patching again 2026-08-09 11:49:52 -05:00
jmrothst 738e938ccc Add ensure_dbus so that firewalld cli commands work 2026-08-09 11:37:17 -05:00
jmrothst 331f8beb3b Add firewalld configuration role, and have services that need it depend on it. 2026-08-09 11:29:08 -05:00
jmrothst 6c7ecfc724 Add fail2ban role and clean up yaml lint noise 2026-08-08 23:50:32 -05:00
jmrothst 9b837dd780 Calm down the yaml linters a bit... 2026-08-08 23:50:03 -05:00
jmrothst 22c402c34a Disabled debug, kept the directives for future debugging if required. 2026-08-08 19:23:56 -05:00
jmrothst abba503a8f Removed invalid dovecot config line 2026-08-08 19:07:41 -05:00
jmrothst 3d2f64ece3 Force the generic python3 interpreter for python so we can safely handle in place OS upgrades on Fedora 2026-08-08 19:04:21 -05:00
jmrothst 130ee0811e convert from community.mysql to ansible.mysql collection 2026-08-08 19:03:51 -05:00
jmrothst 45d6c79f5a Make some scalability corrections 2026-08-08 18:40:54 -05:00
jmrothst 0213cf4918 Service quota-status isn't working so comment for now 2026-08-08 18:23:54 -05:00
jmrothst 81053b881b Remove historical Fedora dnf system upgrade variables for unsupported OS 2026-08-07 21:44:29 -05:00
jmrothst fb70beccf9 Remove EL8 templates, and baddly added templates that never could have worked 2026-08-07 21:43:28 -05:00
jmrothst 483363994d Remove reference to yum since ansible doesn't support it any longer 2026-08-07 21:40:54 -05:00
jmrothst d8fc5510d6 Remove disused ensure_clamav role 2026-08-07 21:40:20 -05:00
jmrothst 16ca07dea8 Drop EL8 support along with a role for a unused unmainted repo 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-08-07 21:17:11 -05:00
jmrothst d626d03b97 Add Fedora 43 & 44 support to Postfix 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-08-07 21:11:32 -05:00
jmrothst 29a0181a13 Fedora 42 is unsupported so force upgrades 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-08-07 21:10:54 -05:00
jmrothst 7c0b93341b Removed epel-release packages from OracleLinux since they have their own 
custom epel

Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-08-07 21:09:54 -05:00
jmrothst fe09c7c25b Reduce noise in apply by basing main.cf and master.cf on the version from Fedora 42 for Fedora 42. 2026-08-05 21:31:30 -05:00
jmrothst 08eb9f3479 Final fixes to support dovecot 2.4.4 to enable Fedora 43/44 imap services 2026-08-05 20:03:20 -05:00
jmrothst bc41260b77 Fixes from upstream apache configurations 2026-08-05 20:01:35 -05:00
jmrothst 656022a2ee feat: add support for Dovecot deployment on Fedora 43 and 44 with systemd unit files and configuration templates 2026-08-03 22:24:44 -05:00
jmrothst cbd79156f1 Force updated caches for OS patching. Just because it works without it for Fedora, doesn't mean that was safe for Debian based OS or even some EL based OS. 2026-08-02 23:36:10 -05:00
jmrothst 44ccab8f9b Git needs the directory root owned, not apache owned... Bad ansible-lint repair suggestion 2026-08-02 23:35:17 -05:00
jmrothst f83901ab43 Prepare for community mysql to ansible mysql transition of collections 2026-08-02 23:34:13 -05:00
jmrothst 07222209ff ansible-lint cleanups 2026-08-02 21:43:04 -05:00
jmrothst 1f6f1f8967 Drop role specific .gitignores 2026-08-02 21:04:19 -05:00
jmrothst 5da2a2322d Don't call the non-existant docker module 2026-08-02 18:23:25 -05:00
jmrothst b54cee1ee5 Drop docker since unmaintained and license change makes usage not aligned 2026-08-02 18:20:43 -05:00
jmrothst 78b5d8c88f Add some missing depends in the make file 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-08-01 20:16:55 -05:00
jmrothst 3de4d3c17c Blank role requirements so makefile works 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-08-01 20:16:55 -05:00
jmrothst 01adbd4d18 Removed known host manipulation 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-08-01 20:16:51 -05:00
jmrothst 2bf9948c5a Use package repo from gitea.fdragon.com with $releasever 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-17 22:21:53 -05:00
jmrothst 604afa87f6 Replace with version from Fedora 44 instead of carry forward old version 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-17 22:21:01 -05:00
jmrothst 9803968104 Attempt to support WebSocket redirects 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-12 16:10:17 -05:00
jmrothst 5e9faf389f Remove role requirements now that all roles have been merged 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:50:08 -05:00
jmrothst 06fe023836 Merge ensure_mariadb 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:49:31 -05:00
jmrothst 02b18d6f8c Add 'roles/ensure_mariadb/' from commit '5a4e112c0b22c32ceda74023dfe10ab5a1dc7116' 
git-subtree-dir: roles/ensure_mariadb
git-subtree-mainline: 49513ee522
git-subtree-split: 5a4e112c0b
 2026-05-10 21:49:13 -05:00
jmrothst 49513ee522 Merge ensure_gitea 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:48:42 -05:00
jmrothst 4d410d147d Add 'roles/ensure_gitea/' from commit 'ce657f8ad4ad5f1ab15314e1007f647c50ea6a46' 
git-subtree-dir: roles/ensure_gitea
git-subtree-mainline: ba0de90bed
git-subtree-split: ce657f8ad4
 2026-05-10 21:48:13 -05:00
jmrothst ba0de90bed Add 'roles/ensure_rsync/' from commit '1d91e5f0fcb5211a2cc6dc129ca375dc4198fcfd' 
git-subtree-dir: roles/ensure_rsync
git-subtree-mainline: 8a784c8b59
git-subtree-split: 1d91e5f0fc
 2026-05-10 21:47:30 -05:00
jmrothst 8a784c8b59 Merge ensure_dovecot 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:46:45 -05:00
jmrothst 0b3d325490 Add 'roles/ensure_dovecot/' from commit '08733e1772a1fd9dfb9e6838f864e93cec524835' 
git-subtree-dir: roles/ensure_dovecot
git-subtree-mainline: 8c4b30b750
git-subtree-split: 08733e1772
 2026-05-10 21:46:18 -05:00
jmrothst 8c4b30b750 Merge ensure_postfix 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:45:44 -05:00
jmrothst 2b45ea745b Add 'roles/ensure_postfix/' from commit 'cee46b68246e8207cbe24c9efe07fc1fe548a89b' 
git-subtree-dir: roles/ensure_postfix
git-subtree-mainline: b53ecda58c
git-subtree-split: cee46b6824
 2026-05-10 21:45:26 -05:00
jmrothst b53ecda58c Merge ensure_apache 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:44:48 -05:00
jmrothst 64ae500730 Add 'roles/ensure_apache/' from commit '5f5133a14d007558861282c4925c468052706bc8' 
git-subtree-dir: roles/ensure_apache
git-subtree-mainline: 0869eeaaf4
git-subtree-split: 5f5133a14d
 2026-05-10 21:44:33 -05:00
jmrothst 0869eeaaf4 Merge ensure_sudo 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:44:09 -05:00
jmrothst da154c7f58 Add 'roles/ensure_sudo/' from commit 'de4fc58c9753aa4d5bb339d6cd0757cbd4e25e20' 
git-subtree-dir: roles/ensure_sudo
git-subtree-mainline: 328ebb72c0
git-subtree-split: de4fc58c97
 2026-05-10 21:43:48 -05:00
jmrothst 328ebb72c0 Merge ensure_rsync 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:43:20 -05:00
jmrothst 681692051b Merge ensure_repo_epel 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:41:52 -05:00
jmrothst b1cb692752 Add 'roles/ensure_repo_epel/' from commit 'c002fc4649ee199a91c74e0112804c0c1e6bcc0e' 
git-subtree-dir: roles/ensure_repo_epel
git-subtree-mainline: f5428c4176
git-subtree-split: c002fc4649
 2026-05-10 21:41:37 -05:00
jmrothst f5428c4176 Merge ensure_repo_rpmfusion 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:41:08 -05:00
jmrothst d21f0a2b02 Add 'roles/ensure_repo_rpmfusion/' from commit '08c814c28758bf08dee46d056a8a687b0afeb42d' 
git-subtree-dir: roles/ensure_repo_rpmfusion
git-subtree-mainline: b956799cc7
git-subtree-split: 08c814c287
 2026-05-10 21:40:53 -05:00
jmrothst b956799cc7 Merge ensure_timezone 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:40:15 -05:00
jmrothst 51c0509bd6 Add 'roles/ensure_timezone/' from commit 'f60fb072a0b6c2bd2e933fc649d282eef458dec7' 
git-subtree-dir: roles/ensure_timezone
git-subtree-mainline: 848f01cece
git-subtree-split: f60fb072a0
 2026-05-10 21:39:59 -05:00
jmrothst 848f01cece Merge ensure_vim 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:39:37 -05:00
jmrothst 68217c0582 Add 'roles/ensure_vim/' from commit '88ee7d94bdab9a59ffc06f71e38691d81cd8381a' 
git-subtree-dir: roles/ensure_vim
git-subtree-mainline: b01bd6ad5c
git-subtree-split: 88ee7d94bd
 2026-05-10 21:39:19 -05:00
jmrothst b01bd6ad5c Merge ensure_selinux 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:38:51 -05:00
jmrothst 8437f7242a Add 'roles/ensure_selinux/' from commit '3df6ef38ce8e94aad5718d5641a2bcc3a14a806f' 
git-subtree-dir: roles/ensure_selinux
git-subtree-mainline: 5b5250046b
git-subtree-split: 3df6ef38ce
 2026-05-10 21:38:33 -05:00
jmrothst 5b5250046b Merge ensure_podman 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:37:34 -05:00
jmrothst 18c28344ba Add 'roles/ensure_podman/' from commit 'b1d5b6cc7554cabe223c6cda4433a54cea06ec48' 
git-subtree-dir: roles/ensure_podman
git-subtree-mainline: 84858ae442
git-subtree-split: b1d5b6cc75
 2026-05-10 21:37:09 -05:00
jmrothst 84858ae442 Merge ensure_os_patch 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:36:47 -05:00
jmrothst 041cde7fe3 Add 'roles/ensure_os_patch/' from commit '0092e5d0892f4820426635128d0e4a150f2ee1a0' 
git-subtree-dir: roles/ensure_os_patch
git-subtree-mainline: bae0615e37
git-subtree-split: 0092e5d089
 2026-05-10 21:36:33 -05:00
jmrothst bae0615e37 Merge ensure_log_rotation 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:36:02 -05:00
jmrothst 46d51180c7 Add 'roles/ensure_log_rotation/' from commit '38364cec4fda418e640ed85852f00746e684a0aa' 
git-subtree-dir: roles/ensure_log_rotation
git-subtree-mainline: b4b2b24c85
git-subtree-split: 38364cec4f
 2026-05-10 21:35:40 -05:00
jmrothst b4b2b24c85 Merge ensure_git 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:35:14 -05:00
jmrothst 7e8ec16873 Add 'roles/ensure_git/' from commit '4efaa9713c914be36e0cb40f94a16f0cc24e56b4' 
git-subtree-dir: roles/ensure_git
git-subtree-mainline: d59786f05e
git-subtree-split: 4efaa9713c
 2026-05-10 21:34:53 -05:00
jmrothst d59786f05e Merge ensure_cockpit 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:34:20 -05:00
jmrothst 15216eb9ca Add 'roles/ensure_cockpit/' from commit '9587886d949ddfa817a4d131539923aacbcfe441' 
git-subtree-dir: roles/ensure_cockpit
git-subtree-mainline: 72d5dca63a
git-subtree-split: 9587886d94
 2026-05-10 21:34:03 -05:00
jmrothst 72d5dca63a Merge ensure_ansible_prereq 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:33:33 -05:00
jmrothst 986cd07ecd Add 'roles/ensure_ansible_prereq/' from commit '86d8ce5ca1642e62be06847784476865514416ea' 
git-subtree-dir: roles/ensure_ansible_prereq
git-subtree-mainline: 5fb6077dbc
git-subtree-split: 86d8ce5ca1
 2026-05-10 21:33:11 -05:00
jmrothst 5fb6077dbc Merge ensure_os_upgrade 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:29:52 -05:00
jmrothst 75b8a6bd72 Add 'roles/ensure_os_upgrade/' from commit 'e56a0039033222ab73c80f54987733eeab813c33' 
git-subtree-dir: roles/ensure_os_upgrade
git-subtree-mainline: 6db10d3c26
git-subtree-split: e56a003903
 2026-05-10 21:28:57 -05:00
jmrothst 6db10d3c26 Merge ensure_hostname 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:27:29 -05:00
jmrothst 3c106b9bf8 Add 'roles/ensure_hostname/' from commit 'ff4effc62c3643cdefb0b819e76185cdaa4a2164' 
git-subtree-dir: roles/ensure_hostname
git-subtree-mainline: 75a6f350d2
git-subtree-split: ff4effc62c
 2026-05-10 21:27:06 -05:00
jmrothst 75a6f350d2 Merge ensure_repo_fdragon 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:24:11 -05:00
jmrothst e5c830f86a Add 'roles/ensure_repo_fdragon/' from commit '5aeefca7241c6b62bebd2f8f92ddab6d608b28ab' 
git-subtree-dir: roles/ensure_repo_fdragon
git-subtree-mainline: 8a8d6bef90
git-subtree-split: 5aeefca724
 2026-05-10 21:23:19 -05:00
jmrothst 8a8d6bef90 Merged ensure_docker 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:22:03 -05:00
jmrothst f68d962df6 Add 'roles/ensure_docker/' from commit '61f5aa283b5dc6fdb97867333ba51e7e70d99c98' 
git-subtree-dir: roles/ensure_docker
git-subtree-mainline: c7d00d588f
git-subtree-split: 61f5aa283b
 2026-05-10 21:21:11 -05:00
jmrothst c7d00d588f Merge ensure_clamav 
Signed-off-by: Jason Rothstein <fdragon@fdragon.org>
 2026-05-10 21:19:33 -05:00
jmrothst f155699877 Add 'roles/ensure_clamav/' from commit 'f3959f6d098abdf6c1794a3d3d0923c86fcca0b6' 
git-subtree-dir: roles/ensure_clamav
git-subtree-mainline: ad56516ef9
git-subtree-split: f3959f6d09
 2026-05-10 21:18:37 -05:00