configure snmp

os_vars/debian.yml

@@ -0,0 +1 @@
+snmp-user: Debian-snmp

os_vars/ubuntu.yml

@@ -0,0 +1 @@
+snmp-user: Debian-snmp

roles/server/files/sudoers

@@ -0,0 +1 @@
+Debian-snmp ALL = NOPASSWD: /etc/snmp/bind, /etc/snmp/fail2ban, /etc/snmp/docker-stats.sh, /etc/snmp/mailcow-dockerized-postfix

roles/server/tasks/utilities/snmpd.yml

@@ -5,6 +5,16 @@
     name: "{{ snmpd_package }}"
     state: present
 
+- name: server | snmpd | install sudoers file
+  copy:
+    dest: "/etc/sudoers.d/10-debian-snmp"
+    src: "sudoers"
+    owner: "root"
+    group: "root"
+    mode: "0660"
+    validate: visudo -cf %s
+  when: ansible_distribution in ["Debian", "Ubuntu"]
+
 - name: server | snmpd | insert anchors to snmpd.conf
   blockinfile:
     path: "/etc/snmp/snmpd.conf"

roles/webserver/tasks/configure_nginx_snmpd.yml

@@ -10,6 +10,6 @@
   lineinfile:
     path: "/etc/snmp/snmpd.conf"
     state: present
-    line: "extend bind /etc/snmp/nginx"
+    line: "extend nginx /etc/snmp/nginx"
     insertafter: "# SECTION: custom settings"
   notify: restart_snmpd