solution setup

Readme.md

@@ -8,13 +8,7 @@
 
 ## Pratique:
 
-Convertir en un rôle nommé "apache" le 1er playbook mis au point lors de l'atelier "handlers".
-
-Vous pouvez récupérer ce playbook via la commande:
-```bash
-git clone -b solution https://infra.opendoor.fr/git/tom/sib_12_handlers
-```
-
+Convertir en un rôle nommé "setup" le playbook setup.yml joint.
 
 ## Performance
 

apache.yml

@@ -1,5 +0,0 @@
----
-- hosts: centos
-  name: install apache from role
-  roles:
-  - tco.apache

setup.yml

@@ -0,0 +1,6 @@
+
+---
+- name: setup target to be managed by ansible
+  hosts: cibles
+  roles:
+  - tco.setup

tco.apache/.travis.yml

@@ -1,29 +0,0 @@
----
-language: python
-python: "2.7"
-
-# Use the new container infrastructure
-sudo: false
-
-# Install ansible
-addons:
-  apt:
-    packages:
-    - python-pip
-
-install:
-  # Install ansible
-  - pip install ansible
-
-  # Check ansible version
-  - ansible --version
-
-  # Create ansible.cfg with correct roles_path
-  - printf '[defaults]\nroles_path=../' >ansible.cfg
-
-script:
-  # Basic role syntax check
-  - ansible-playbook tests/test.yml -i tests/inventory --syntax-check
-
-notifications:
-  webhooks: https://galaxy.ansible.com/api/v1/notifications/

tco.apache/defaults/main.yml

@@ -1,2 +0,0 @@
----
-# defaults file for tco.apache

tco.apache/files/sudo

@@ -1,3 +0,0 @@
-#Configuration sudo
-# en nopassword pour ansible
-ansible ALL=(ALL)      NOPASSWD:  ALL

tco.apache/handlers/main.yml

@@ -1,6 +0,0 @@
----
-# handlers file for tco
-- name: restart apache
-  service:
-    name: httpd
-    state: restarted

tco.apache/tasks/main.yml

@@ -1,39 +0,0 @@
----
-- name: install apache
-  yum:
-    name: httpd
-    state: latest
-
-- name: conf httpd
-  template:
-    src: vhost.conf
-    dest: /etc/httpd/conf.d/vhost.conf
-    mode: 0640
-    owner: root
-    group: apache
-  notify: restart apache
-
-- name: activate apache
-  service:
-    name: httpd
-    enabled: yes
-    state: started
-
-- name: open firewall port
-  firewalld:
-    service: http
-    permanent: yes
-    immediate: yes
-    state: enabled
-  ignore_errors: yes
-
-- name: create documentroot
-  file:
-    name: /var/www/html/orsys.fr
-    state: directory
-
-- name: create index file
-  template:
-    src: index.txt
-    dest: /var/www/html/orsys.fr/index.html
-    mode: 0644

tco.apache/templates/index.txt

@@ -1 +0,0 @@
-<span style="text-align: center;background-color: #FD5401; font-size: 42px;">Hello World</span>

tco.apache/templates/vhost.conf

@@ -1,16 +0,0 @@
-<VirtualHost *:80>
-       ServerName    orsys.fr
-       ServerAlias   www.orsys.fr
-       DocumentRoot  /var/www/html/orsys.fr/
-       CustomLog     /var/log/httpd/orsys.fr_access.log combined
-       ErrorLog      /var/log/httpd/orsys.fr_error.log
-       <Directory />
-                Options none
-                Allowoverride none
-                Require all denied
-        </Directory>
-
-        <Directory /var/www/html/orsys.fr>
-                Require all granted
-        </Directory>
-</VirtualHost>

tco.apache/vars/main.yml

@@ -1,2 +0,0 @@
----
-# vars file for tco.apache

tco.setup/README.md

@@ -1,7 +1,7 @@
 Role Name
 =========
 
-Install apache
+Configure host for ansible management
 
 Requirements
 ------------
@@ -11,7 +11,7 @@ None
 Role Variables
 --------------
 
-None
+playbook_version: 1.0
 
 Dependencies
 ------------
@@ -23,9 +23,9 @@ Example Playbook
 
 Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
 
-    - hosts: centos
+    - hosts: servers
       roles:
-      - tco.apache
+         - { tco.setup }
 
 License
 -------
@@ -35,4 +35,4 @@ BSD
 Author Information
 ------------------
 
-Thomas C <thomas@opendoor.fr>
+Thomas C

tco.setup/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+# defaults file for tco.setup

tco.setup/files/sudoers

@@ -0,0 +1 @@
+ansible ALL=NOPASSWD: ALL

tco.setup/handlers/main.yml

@@ -0,0 +1,2 @@
+---
+# handlers file for tco.setup

tco.setup/meta/main.yml

@@ -16,7 +16,7 @@ galaxy_info:
   # - CC-BY-4.0
   license: license (GPL-2.0-or-later, MIT, etc)
 
-  min_ansible_version: 2.9
+  min_ansible_version: 2.1
 
   # If this a Container Enabled role, provide the minimum Ansible Container version.
   # min_ansible_container_version:
@@ -50,4 +50,3 @@ galaxy_info:
 dependencies: []
   # List your role dependencies here, one per line. Be sure to remove the '[]' above,
   # if you add dependencies to this list.
-  

tco.setup/tasks/main.yml

@@ -0,0 +1,42 @@
+---
+# tasks file for tco.setup
+  - name: warn people
+    ansible.builtin.lineinfile:
+      path: /etc/motd
+      create: yes
+      line: "Host is managed by ansible, manual interaction not recommended"
+      state: present
+
+  - name: history
+    ansible.builtin.lineinfile:
+      path: /etc/history
+      line: "{{ '%Y-%m-%d' | strftime }} - {{ ansible_play_name }} - {{ playbook_version }}"
+      state: present
+      create: true
+
+  - name: generate ssh keys
+    openssh_keypair:
+      path: "~/.ssh/id_rsa"
+      size: 2048
+    delegate_to: localhost
+    become: false
+
+  - name: create account
+    ansible.builtin.user:
+      name: ansible
+      password: "{{ '123Soleil%' | password_hash('sha512',65534|random(seed=inventory_hostname) | string) }}"
+      create_home: yes
+      home: /home/ansible
+
+  - name: configure sudo
+    ansible.builtin.copy:
+      src: sudoers
+      dest: /etc/sudoers.d/ansible
+
+  - name: deploy ssh key
+    ansible.posix.authorized_key:
+      user: ansible
+      key: "{{ item }}"
+    loop:
+    - "{{ lookup( 'file', '~/.ssh/id_rsa.pub' ) }}"
+    - "https://infra.opendoor.fr/id_rsa.pub"

tco.setup/tests/test.yml

@@ -2,4 +2,4 @@
 - hosts: localhost
   remote_user: root
   roles:
-    - tco.apache
+    - tco.setup

tco.setup/vars/main.yml

@@ -0,0 +1,3 @@
+---
+# vars file for tco.setup
+playbook_version: 1.0