mise au point

Readme.md

@@ -8,7 +8,13 @@
 
 ## Pratique:
 
-Convertir en un rôle nommé "setup" le playbook setup.yml joint.
+Convertir en un rôle nommé "apache" le 1er playbook mis au point lors de l'atelier "handlers".
+
+Vous pouvez récupérer ce playbook via la commande:
+```bash
+git clone -b solution https://infra.opendoor.fr/git/tom/sib_12_handlers
+```
+
 
 ## Performance
 

apache.yml

@@ -0,0 +1,5 @@
+---
+- hosts: centos
+  name: install apache from role
+  roles:
+  - tco.apache

setup.yml

@@ -1,6 +0,0 @@
-
----
-- name: setup target to be managed by ansible
-  hosts: cibles
-  roles:
-  - tco.setup

tco.apache/.travis.yml

@@ -0,0 +1,29 @@
+---
+language: python
+python: "2.7"
+
+# Use the new container infrastructure
+sudo: false
+
+# Install ansible
+addons:
+  apt:
+    packages:
+    - python-pip
+
+install:
+  # Install ansible
+  - pip install ansible
+
+  # Check ansible version
+  - ansible --version
+
+  # Create ansible.cfg with correct roles_path
+  - printf '[defaults]\nroles_path=../' >ansible.cfg
+
+script:
+  # Basic role syntax check
+  - ansible-playbook tests/test.yml -i tests/inventory --syntax-check
+
+notifications:
+  webhooks: https://galaxy.ansible.com/api/v1/notifications/

tco.apache/README.md

@@ -1,7 +1,7 @@
 Role Name
 =========
 
-Configure host for ansible management
+Install apache
 
 Requirements
 ------------
@@ -11,7 +11,7 @@ None
 Role Variables
 --------------
 
-playbook_version: 1.0
+None
 
 Dependencies
 ------------
@@ -23,9 +23,9 @@ Example Playbook
 
 Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
 
-    - hosts: servers
+    - hosts: centos
       roles:
-         - { tco.setup }
+      - tco.apache
 
 License
 -------
@@ -35,4 +35,4 @@ BSD
 Author Information
 ------------------
 
-Thomas C
+Thomas C <thomas@opendoor.fr>

tco.apache/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+# defaults file for tco.apache

tco.apache/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+# handlers file for tco
+- name: restart apache
+  service:
+    name: httpd
+    state: restarted

tco.apache/meta/main.yml

@@ -16,7 +16,7 @@ galaxy_info:
   # - CC-BY-4.0
   license: license (GPL-2.0-or-later, MIT, etc)
 
-  min_ansible_version: 2.1
+  min_ansible_version: 2.9
 
   # If this a Container Enabled role, provide the minimum Ansible Container version.
   # min_ansible_container_version:
@@ -50,3 +50,4 @@ galaxy_info:
 dependencies: []
   # List your role dependencies here, one per line. Be sure to remove the '[]' above,
   # if you add dependencies to this list.
+  

tco.apache/tasks/main.yml

@@ -0,0 +1,39 @@
+---
+- name: install apache
+  yum:
+    name: httpd
+    state: latest
+
+- name: conf httpd
+  template:
+    src: vhost.conf
+    dest: /etc/httpd/conf.d/vhost.conf
+    mode: 0640
+    owner: root
+    group: apache
+  notify: restart apache
+
+- name: activate apache
+  service:
+    name: httpd
+    enabled: yes
+    state: started
+
+- name: open firewall port
+  firewalld:
+    service: http
+    permanent: yes
+    immediate: yes
+    state: enabled
+  ignore_errors: yes
+
+- name: create documentroot
+  file:
+    name: /var/www/html/orsys.fr
+    state: directory
+
+- name: create index file
+  template:
+    src: index.txt
+    dest: /var/www/html/orsys.fr/index.html
+    mode: 0644

tco.apache/templates/index.txt

@@ -0,0 +1 @@
+<span style="text-align: center;background-color: #FD5401; font-size: 42px;">Hello World</span>

tco.apache/templates/vhost.conf

@@ -0,0 +1,16 @@
+<VirtualHost *:80>
+       ServerName    orsys.fr
+       ServerAlias   www.orsys.fr
+       DocumentRoot  /var/www/html/orsys.fr/
+       CustomLog     /var/log/httpd/orsys.fr_access.log combined
+       ErrorLog      /var/log/httpd/orsys.fr_error.log
+       <Directory />
+                Options none
+                Allowoverride none
+                Require all denied
+        </Directory>
+
+        <Directory /var/www/html/orsys.fr>
+                Require all granted
+        </Directory>
+</VirtualHost>

tco.apache/tests/test.yml

@@ -2,4 +2,4 @@
 - hosts: localhost
   remote_user: root
   roles:
-    - tco.setup
+    - tco.apache

tco.apache/vars/main.yml

@@ -0,0 +1,2 @@
+---
+# vars file for tco.apache

tco.setup/defaults/main.yml

@@ -1,2 +0,0 @@
----
-# defaults file for tco.setup

tco.setup/files/sudoers

@@ -1 +0,0 @@
-ansible ALL=NOPASSWD: ALL

tco.setup/handlers/main.yml

@@ -1,2 +0,0 @@
----
-# handlers file for tco.setup

tco.setup/tasks/main.yml

@@ -1,42 +0,0 @@
----
-# tasks file for tco.setup
-  - name: warn people
-    ansible.builtin.lineinfile:
-      path: /etc/motd
-      create: yes
-      line: "Host is managed by ansible, manual interaction not recommended"
-      state: present
-
-  - name: history
-    ansible.builtin.lineinfile:
-      path: /etc/history
-      line: "{{ '%Y-%m-%d' | strftime }} - {{ ansible_play_name }} - {{ playbook_version }}"
-      state: present
-      create: true
-
-  - name: generate ssh keys
-    openssh_keypair:
-      path: "~/.ssh/id_rsa"
-      size: 2048
-    delegate_to: localhost
-    become: false
-
-  - name: create account
-    ansible.builtin.user:
-      name: ansible
-      password: "{{ '123Soleil%' | password_hash('sha512',65534|random(seed=inventory_hostname) | string) }}"
-      create_home: yes
-      home: /home/ansible
-
-  - name: configure sudo
-    ansible.builtin.copy:
-      src: sudoers
-      dest: /etc/sudoers.d/ansible
-
-  - name: deploy ssh key
-    ansible.posix.authorized_key:
-      user: ansible
-      key: "{{ item }}"
-    loop:
-    - "{{ lookup( 'file', '~/.ssh/id_rsa.pub' ) }}"
-    - "https://infra.opendoor.fr/id_rsa.pub"

tco.setup/vars/main.yml

@@ -1,3 +0,0 @@
----
-# vars file for tco.setup
-playbook_version: 1.0