267 lines
8.9 KiB
YAML
267 lines
8.9 KiB
YAML
---
|
|
# vars file for ensure_apache
|
|
package_list:
|
|
- name: httpd
|
|
state: present
|
|
- name: httpd-filesystem
|
|
state: present
|
|
- name: httpd-tools
|
|
state: present
|
|
- name: mod_http2
|
|
state: present
|
|
- name: mod_md
|
|
state: present
|
|
- name: mod_ssl
|
|
state: present
|
|
- name: php
|
|
state: present
|
|
- name: php-cli
|
|
state: present
|
|
- name: php-common
|
|
state: present
|
|
- name: php-fpm
|
|
state: present
|
|
- name: php-mbstring
|
|
state: present
|
|
- name: php-mysqlnd
|
|
state: present
|
|
- name: php-opcache
|
|
state: present
|
|
- name: php-pdo
|
|
state: present
|
|
- name: php-sodium
|
|
state: present
|
|
- name: php-xml
|
|
state: present
|
|
firewalld_list:
|
|
- permanent: 'yes'
|
|
service: http
|
|
state: enabled
|
|
- permanent: 'yes'
|
|
service: https
|
|
state: enabled
|
|
permission_list:
|
|
- path: /etc/httpd/md
|
|
group: apache
|
|
owner: root
|
|
mode: '0770'
|
|
state: directory
|
|
setype: httpd_var_lib_t
|
|
seboolean_list:
|
|
- name: httpd_can_network_connect
|
|
persistent: 'yes'
|
|
state: 'yes'
|
|
- name: httpd_can_network_connect_db
|
|
persistent: 'yes'
|
|
state: 'yes'
|
|
service_list:
|
|
- name: httpd.service
|
|
state: started
|
|
enabled: 'yes'
|
|
- name: httpd-reload.timer
|
|
state: started
|
|
enabled: 'yes'
|
|
state_handler: restarted
|
|
- name: php-fpm.service
|
|
state: started
|
|
enabled: 'yes'
|
|
template_list:
|
|
- dest: /etc/httpd/conf.d/autoindex.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.d/autoindex.conf'
|
|
- dest: /etc/httpd/conf.d/README
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.d/README'
|
|
- dest: /etc/httpd/conf.d/vhost.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.d/vhost.conf'
|
|
- dest: /etc/httpd/conf.d/ssl.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.d/ssl.conf'
|
|
- dest: /etc/httpd/conf.d/userdir.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.d/userdir.conf'
|
|
- dest: /etc/httpd/conf.d/welcome.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.d/welcome.conf'
|
|
- dest: /etc/httpd/conf/httpd.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf/httpd.conf'
|
|
- dest: /etc/httpd/conf/magic
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf/magic'
|
|
- dest: /etc/httpd/conf.modules.d/00-base.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/00-base.conf'
|
|
- dest: /etc/httpd/conf.modules.d/00-brotli.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/00-brotli.conf'
|
|
- dest: /etc/httpd/conf.modules.d/00-dav.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/00-dav.conf'
|
|
- dest: /etc/httpd/conf.modules.d/00-lua.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/00-lua.conf'
|
|
- dest: /etc/httpd/conf.modules.d/00-mpm.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/00-mpm.conf'
|
|
- dest: /etc/httpd/conf.modules.d/00-optional.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/00-optional.conf'
|
|
- dest: /etc/httpd/conf.modules.d/00-proxy.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/00-proxy.conf'
|
|
- dest: /etc/httpd/conf.modules.d/00-ssl.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/00-ssl.conf'
|
|
- dest: /etc/httpd/conf.modules.d/00-systemd.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/00-systemd.conf'
|
|
- dest: /etc/httpd/conf.modules.d/01-cgi.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/01-cgi.conf'
|
|
- dest: /etc/httpd/conf.modules.d/01-md.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/01-md.conf'
|
|
- dest: /etc/httpd/conf.modules.d/10-h2.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/10-h2.conf'
|
|
- dest: /etc/httpd/conf.modules.d/10-proxy_h2.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/10-proxy_h2.conf'
|
|
- dest: /etc/httpd/conf.modules.d/README
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/httpd/conf.modules.d/README'
|
|
- dest: /etc/logrotate.d/httpd
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/logrotate.d/httpd'
|
|
- dest: /etc/sysconfig/htcacheclean
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/etc/sysconfig/htcacheclean'
|
|
- dest: /usr/lib/systemd/system/htcacheclean.service
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/usr/lib/systemd/system/htcacheclean.service'
|
|
- dest: /usr/lib/systemd/system/httpd.service
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/usr/lib/systemd/system/httpd.service'
|
|
- dest: /usr/lib/systemd/system/httpd.socket
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/usr/lib/systemd/system/httpd.socket'
|
|
- dest: /usr/lib/systemd/system/httpd-init.service
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/usr/lib/systemd/system/httpd-init.service'
|
|
- dest: /usr/lib/systemd/system/httpd-reload.service
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/usr/lib/systemd/system/httpd-reload.service'
|
|
- dest: /usr/lib/systemd/system/httpd-reload.timer
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/usr/lib/systemd/system/httpd-reload.timer'
|
|
- dest: /usr/lib/systemd/system/httpd@.service
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/usr/lib/systemd/system/httpd@.service'
|
|
- dest: /usr/lib/systemd/system/httpd.service.d/php-fpm.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/usr/lib/systemd/system/httpd.service.d/php-fpm.conf'
|
|
- dest: /usr/lib/systemd/system/httpd.socket.d/10-listen443.conf
|
|
group: root
|
|
mode: '0644'
|
|
owner: root
|
|
src: '{{ ansible_facts["distribution"] }}/{{ ansible_facts["distribution_major_version"]
|
|
}}/usr/lib/systemd/system/httpd.socket.d/10-listen443.conf'
|