135 lines
3.8 KiB
YAML
135 lines
3.8 KiB
YAML
---
|
|
- name: OS vars
|
|
include_vars: "{{ ansible_distribution|lower }}.yml"
|
|
- name: install prerequisite
|
|
package:
|
|
name: "{{ packages_list }}"
|
|
state: present
|
|
|
|
- name: set some vars
|
|
set_fact:
|
|
mariadb_root_password: "{{ lookup( 'keepass', '{{ group_names[0]}}/{{ inventory_hostname }}_mysql', 'password' ) }}"
|
|
|
|
- name: install on CentOS
|
|
block:
|
|
- name: install repo 1
|
|
get_url:
|
|
url: https://downloads.mariadb.com/MariaDB/mariadb_repo_setup
|
|
dest: /tmp/configure_mariadb_repo
|
|
mode: 0700
|
|
|
|
- name: install repo 2
|
|
command: /tmp/configure_mariadb_repo --os-type=rhel --os-version=7 --skip-maxscale
|
|
|
|
- name: install mariadb server package
|
|
yum:
|
|
name:
|
|
- "mariadb"
|
|
- mariadb-server
|
|
state: present
|
|
|
|
- name: create datadir
|
|
file:
|
|
path: "{{ mariadb_data_dir }}"
|
|
state: directory
|
|
mode: 0700
|
|
owner: "{{ mariadb_user }}"
|
|
setype: mysqld_db_t
|
|
when: ansible_distribution == "CentOS"
|
|
|
|
|
|
- name: initialize data dir
|
|
become: true
|
|
become_user: mysql
|
|
command: "/usr/bin/mysql_install_db --datadir={{ mariadb_data_dir }} --user={{ mariadb_user }}"
|
|
args:
|
|
creates: "{{ mariadb_data_dir }}/mysql"
|
|
- name: setup logging
|
|
file:
|
|
path: "{{ mariadb_server_log }}"
|
|
state: touch
|
|
owner: mysql
|
|
group: "{{ admin_group }}"
|
|
mode: 0640
|
|
|
|
- name: setup logfile rotation
|
|
template:
|
|
src: mysql_logrotate
|
|
dest: /etc/logrotate.d/mysql.conf
|
|
|
|
- name: configure mariadb
|
|
ini_file:
|
|
path: /etc/my.cnf.d/server.cnf
|
|
section: mysqld
|
|
option: "{{ item.option }}"
|
|
value: "{{ item.value}}"
|
|
state: present
|
|
loop:
|
|
"{{ mariadb_server_settings }}"
|
|
notify: restart mysql
|
|
|
|
|
|
- name: activate and start mariadb service
|
|
systemd: name=mariadb enabled=true state=started
|
|
|
|
#Below tasks "stolen" from https://github.com/geerlingguy/ansible-role-mysql/
|
|
- name: Get list of hosts for the root user.
|
|
command: mysql -NBe "SELECT Host FROM mysql.user WHERE User = '{{ mariadb_root_username }}' ORDER BY (Host='localhost') ASC"
|
|
register: mariadb_root_hosts
|
|
changed_when: false
|
|
check_mode: no
|
|
|
|
- name: Update MySQL root password for localhost root account (5.7.x).
|
|
shell: >
|
|
mysql -u root -NBe
|
|
'ALTER USER "{{ mariadb_root_username }}"@"{{ item }}" IDENTIFIED BY "{{ mariadb_root_password }}";'
|
|
with_items: "{{ mariadb_root_hosts.stdout_lines|default([]) }}"
|
|
|
|
# Has to be after the root password assignment, for idempotency.
|
|
- name: Copy .my.cnf file with root password credentials.
|
|
template:
|
|
src: "root-my.cnf.j2"
|
|
dest: "{{ mariadb_root_home }}/.my.cnf"
|
|
owner: root
|
|
group: root
|
|
mode: 0600
|
|
|
|
- name: Disallow root login remotely and anonymous access
|
|
command: 'mysql -NBe "{{ item }}"'
|
|
with_items:
|
|
- DELETE FROM mysql.user WHERE User=''
|
|
- DELETE FROM mysql.user WHERE User='{{ mariadb_root_username }}' AND Host NOT IN ('localhost', '127.0.0.1', '::1')
|
|
changed_when: false
|
|
|
|
- name: create root bin and backup dirs
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: 0700
|
|
loop:
|
|
- "{{ mariadb_backup_dir }}"
|
|
- /root/bin
|
|
|
|
- name: deploy backup script
|
|
copy:
|
|
src: /home/tom/Documents/Opendoor/Developpement/Scripts/MySQL/mysql_backup.sh
|
|
dest: /root/bin
|
|
mode: 0700
|
|
|
|
- name: backup script cron
|
|
cron:
|
|
name: mysql_backup
|
|
cron_file: mysql_backup
|
|
user: root
|
|
hour: "01"
|
|
minute: "00"
|
|
job: "/root/bin/mysql_backup.sh {{ mariadb_backup_dir }}"
|
|
|
|
- name: install percona toolkit
|
|
yum:
|
|
name: https://www.percona.com/downloads/percona-toolkit/3.1.0/binary/redhat/7/x86_64/percona-toolkit-3.1.0-2.el7.x86_64.rpm
|
|
state: present
|
|
when: ansible_distribution == 'CentOS'
|