initial commit

This commit is contained in:
2022-11-17 23:00:25 +01:00
commit bf2678ee44
15 changed files with 260 additions and 0 deletions

11
Readme.md Normal file
View File

@@ -0,0 +1,11 @@
# Role apache
Utilisez ce role comme base pour les ateliers de ce jour
Récupérez le via la commande
```bash
cd
git clone https://infra.opendoor.fr/git/tom/abr_day4.git
```

6
apache.yml Normal file
View File

@@ -0,0 +1,6 @@
---
- name: install apache via ansible playbook
hosts: all
roles:
- tco.apache_abrd3

View File

@@ -0,0 +1,29 @@
---
language: python
python: "2.7"
# Use the new container infrastructure
sudo: false
# Install ansible
addons:
apt:
packages:
- python-pip
install:
# Install ansible
- pip install ansible
# Check ansible version
- ansible --version
# Create ansible.cfg with correct roles_path
- printf '[defaults]\nroles_path=../' >ansible.cfg
script:
# Basic role syntax check
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/

View File

@@ -0,0 +1,41 @@
Role Name
=========
Install apache,
Requirements
------------
None
Role Variables
--------------
apache_server_name: no default
apache_document_root: no default
see also files in vars subdirectory
Dependencies
------------
None
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- tco.apache_abrd3
License
-------
BSD
Author Information
------------------
Thomas C <thomas@opendoor.fr>

View File

@@ -0,0 +1,2 @@
---
# defaults file for tco.apache_abrd3

View File

@@ -0,0 +1,6 @@
---
# handlers file for tco.apache_abrd3
- name: restart apache
ansible.builtin.service:
name: "{{ apache_service_name }}"
state: restarted

View File

@@ -0,0 +1,52 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

View File

@@ -0,0 +1,65 @@
---
# tasks file for tco.apache_abrd3
- name: import OS variables
include_vars: "{{ ansible_distribution | lower }}.yml"
- name: install apache
ansible.builtin.package:
name: "{{ apache_package_name }}"
state: present
- name: conf httpd
template:
src: vhost.conf
dest: "{{ apache_config_dir }}/vhost.conf"
mode: 0640
owner: root
group: "{{ apache_group }}"
notify: restart apache
- meta: flush_handlers
- name: activate apache
service:
name: "{{ apache_service_name }}"
enabled: yes
state: restarted
- name: setup firewall
block:
- name: install firewalld packages
yum:
name:
- python3-firewall
- firewalld
state: present
- name: enable firewalld service
service:
name: firewalld
enabled: true
state: started
- name: open firewall port
firewalld:
service: "{{ item }}"
permanent: yes
immediate: yes
state: enabled
loop:
- http
- https
ignore_errors: true
when: ansible_distribution == 'CentOS'
- name: create documentroot
file:
name: "{{ apache_document_root }}{{ apache_server_name }}/"
state: directory
- name: copy index file
template:
src: index.txt
dest: "{{ apache_document_root }}{{ apache_server_name }}/index.html"
mode: 0644

View File

@@ -0,0 +1 @@
<h1>hello World {{ apache_server_name }} </h1>

View File

@@ -0,0 +1,24 @@
<VirtualHost *:80>
ServerName {{ apache_server_name }}
ServerAlias www.{{ apache_server_name }}
ServerAlias {{ inventory_hostname }}
DocumentRoot {{ apache_document_root }}{{ apache_server_name }}
CustomLog {{ apache_log_dir }}/{{ apache_server_name }}_access.log combined
ErrorLog {{ apache_log_dir }}/{{ apache_server_name }}_error.log
<Directory />
Options none
Allowoverride none
Require all denied
</Directory>
<Directory {{ apache_document_root }}{{ apache_server_name }}>
Require all granted
</Directory>
<Directory {{ apache_document_root }}{{ apache_server_name }}/Private>
Options indexes
AuthName "stop"
AuthType Basic
AuthUserFile {{ apache_config_dir }}/passwd
require valid-user
</Directory>
</VirtualHost>

View File

@@ -0,0 +1,2 @@
localhost

View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- tco.apache_abrd3

View File

@@ -0,0 +1,7 @@
#/home/formation/sib_10_premier_playbook/centos.yml
apache_package_name: httpd
apache_service_name: httpd
apache_log_dir: /var/log/httpd/
apache_config_dir: /etc/httpd/conf.d/
apache_group: apache
apache_user: apache

View File

@@ -0,0 +1,7 @@
#/home/formation/sib_10_premier_playbook/debian.yml
apache_package_name: apache2
apache_service_name: apache2
apache_log_dir: /var/log/apache2/
apache_config_dir: /etc/apache2/sites-enabled/
apache_group: www-data
apache_user: www-data

View File

@@ -0,0 +1,2 @@
---
# vars file for tco.apache_abrd3