You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
83 lines
1.7 KiB
83 lines
1.7 KiB
- name: Update all packages to their latest version
|
|
apt:
|
|
name: "*"
|
|
state: latest
|
|
update_cache: yes
|
|
|
|
- name: Install packages for webserver support
|
|
apt:
|
|
name: [
|
|
'certbot',
|
|
'rsync',
|
|
]
|
|
state: present
|
|
|
|
- name: Support running MJB::Web
|
|
include_role:
|
|
name: mjb-role-webapp
|
|
|
|
- name: Allow manager to have sudo access for certbot
|
|
lineinfile:
|
|
dest: /etc/sudoers
|
|
state: present
|
|
regexp: '^manager'
|
|
line: 'manager ALL=(ALL) NOPASSWD: ALL'
|
|
validate: 'visudo -cf %s'
|
|
|
|
- name: Install mjb.certbot.service file.
|
|
copy:
|
|
dest: /etc/systemd/system/mjb.certbot.service
|
|
src: "{{ role_path }}/files/mjb.certbot.service"
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: Start & enable mjb.certbot
|
|
service:
|
|
name: mjb.certbot
|
|
state: started
|
|
enabled: true
|
|
|
|
- name: Create /etc/letsencrypt/.secrets/
|
|
file:
|
|
state: directory
|
|
path: /etc/letsencrypt/.secrets
|
|
owner: root
|
|
group: root
|
|
mode: 0750
|
|
|
|
- name: Create /etc/letsencrypt/.secrets/linode.ini
|
|
file:
|
|
state: touch
|
|
path: /etc/letsencrypt/.secrets/linode.ini
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: "Populatge linode secrets"
|
|
lineinfile:
|
|
path: /etc/letsencrypt/.secrets/linode.ini
|
|
line: "{{ item }}"
|
|
with_items: "{{ linode_dns_credentials }}"
|
|
|
|
- name: Create keypair for syncing
|
|
openssh_keypair:
|
|
path: "/root/.ssh/id_rsa"
|
|
type: rsa
|
|
size: 4096
|
|
owner: root
|
|
group: root
|
|
state: present
|
|
force: no
|
|
|
|
- name: Get private key from host
|
|
fetch:
|
|
src: /root/.ssh/id_rsa
|
|
dest: "{{ inventory_dir }}/files/ssh/id_rsa"
|
|
flat: true
|
|
|
|
- name: Get public key from host
|
|
fetch:
|
|
src: /root/.ssh/id_rsa.pub
|
|
dest: "{{ inventory_dir }}/files/ssh/id_rsa.pub"
|
|
flat: true
|
|
|