firewall service management has nothing to do here

Readme.md

@@ -1,6 +0,0 @@
-# Playbook d'installation apache
-
-LEs fichiers vhost.conf et index.html sont récupérés par le pilote
-
-directement depuis le dépôt git
-

apache.yml

@@ -3,13 +3,6 @@
   hosts: centos
 
   tasks:
-  - name: retrieve ansible.builtin.files
-    ansible.builtin.git:
-      repo: https://infra.opendoor.fr/git/tom/sib_10_premier_playbook
-      dest: /tmp/sib_10
-    delegate_to: localhost
-    become: false
-
   - name: install apache
     ansible.builtin.package:
       name: httpd
@@ -17,7 +10,7 @@
 
   - name: conf httpd
     ansible.builtin.template:
-      src: /tmp/sib_10/vhost.conf
+      src: vhost.conf
       dest: /etc/httpd/conf.d/vhost.conf
       mode: 0640
       owner: root
@@ -38,12 +31,6 @@
         - firewalld
         state: present
 
-    - name: enable firewalld service
-      ansible.builtin.service:
-        name: firewalld
-        enabled: true
-        state: started
-
     - name: open firewall port
       ansible.posix.firewalld:
         service: "{{ item }}"
@@ -53,22 +40,14 @@
       loop:
       - http
       - https
-    ignore_errors: true
 
   - name: create documentroot
     ansible.builtin.file:
       name: /var/www/html/example.org/
       state: directory
 
-  - name: copy index ansible.builtin.file
+  - name: copy index file
     ansible.builtin.template:
-      src: /tmp/sib_10/index.txt
+      src: index.txt
       dest: /var/www/html/example.org/index.html
       mode: 0644
-
-  - name: delete temp ansible.builtin.files
-    ansible.builtin.file:
-      path: /tmp/sib_10
-      state: absent
-    delegate_to: localhost
-    become: false

index.txt

@@ -0,0 +1 @@
+<h1>hello World</h1>

vhost.conf

@@ -0,0 +1,24 @@
+<VirtualHost *:80>
+   ServerName example.org
+   ServerAlias www.example.org
+   ServerAlias {{ inventory_hostname }}
+   DocumentRoot /var/www/html/example.org
+   CustomLog   /var/log/httpd/example.org_access.log combined
+   ErrorLog    /var/log/httpd/example.org_error.log
+   <Directory />
+      Options none
+      Allowoverride none
+      Require all denied
+   </Directory>
+
+   <Directory /var/www/html/example.org>
+      Require all granted
+   </Directory>
+   <Directory /var/www/html/example.org/Private>
+      Options indexes
+      AuthName "stop"
+      AuthType Basic
+      AuthUserFile /etc/httpd/passwd
+      require valid-user
+   </Directory>
+</VirtualHost>