rene/ansible-pull
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

back to singular

Browse Source
This commit is contained in:
Rene Mewissen
2022-09-24 20:55:50 +02:00
parent 0e20f83a67
commit dd00b2840a
60 changed files with 51 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
roles/webserver/files/nginx_localhost Normal file
View File

@@ -0,0 +1,11 @@
server {
listen 80;
server_name localhost;
location /nginx-status {
stub_status on;
access_log off;
allow 127.0.0.1;
allow ::1;
deny all;
}
}

9
roles/webserver/handlers/main.yml Normal file
View File

@@ -0,0 +1,9 @@
- name: restart_nginx
service:
name: "nginx"
state: restarted
- name: restart_snmpd
service:
name: "snmpd"
state: restarted

4
roles/webserver/tasks/apps/apps.yml Normal file
View File

@@ -0,0 +1,4 @@
- include_tasks: nextcloud/nextcloud.yml
when:
- nextcloud is defined
- nextcloud == True

20
roles/webserver/tasks/apps/nextcloud/nextcloud.yml Normal file
View File

@@ -0,0 +1,20 @@
- include_vars: nextcloud.yml
- import_tasks: apps/nextcloud/prereq.yml
- name: webserver | nextcloud | get tar ball
uri:
url: "https://download.nextcloud.com/server/releases/latest.zip"
dest: "/tmp/nextcloud_latest.zip"
follow_redirects: all
- name: webserver | nextcloud | extract archive
unarchive:
src: "/tmp/nextcloud_latest.zip"
dest: "/var/www/"
owner: "{{ webuser }}"
group: "{{ webuser }}"
- name: webserver | nextcloud | remove temporary file
file:
path: "/tmp/nextcloud_latest.zip"
state: absent

29
roles/webserver/tasks/apps/nextcloud/prereq.yml Normal file
View File

@@ -0,0 +1,29 @@
- name: webserver | nextcloud | basic tools
package:
state: latest
name:
- ca-certificates
- apt-transport-https
- software-properties-common
- lsb-release
- ca-certificates
when: ansible_distribution in ["Debian", "Ubuntu"]
- name: webserver | nextcloud | prereq | get php repo key
uri:
url: "https://packages.sury.org/php/apt.gpg"
dest: "/etc/apt/trusted.gpg.d/php.gpg"
- name: webserver | nextcloud | prereq | add php repo
lineinfile:
path: "/etc/apt/sources.list.d/php.list"
state: present
line: "deb https://packages.sury.org/php/ {{ ansible_distribution_release | lower }} main"
create: True
- name: webserver | nextcloud | prereq | install php
package:
state: latest
name: "{{ item.package }}"
update_cache: True
with_items: "{{ nextcloud_php_packages }}"

15
roles/webserver/tasks/configure_nginx_snmpd.yml Normal file
View File

@@ -0,0 +1,15 @@
- name: webserver | snmpd | get script
get_url:
url: "https://raw.githubusercontent.com/librenms/librenms-agent/master/snmp/nginx"
dest: "/etc/snmp/nginx"
mode: "0755"
owner: "root"
group: "root"
- name: webserver | snmpd | configure extend
lineinfile:
path: "{{ snmpd_conf }}"
state: present
line: "extend nginx /etc/snmp/nginx"
insertafter: "# SECTION: custom settings"
notify: restart_snmpd

18
roles/webserver/tasks/install_apache.yml Normal file
View File

@@ -0,0 +1,18 @@
- name: webserver | apache | installing apache
package:
name: "{{ apache_package }}"
state: latest
# - name: webserver | apache | setup localhost for statistics
# copy:
# src: "apache_localhost"
# dest: "/etc/apache/sites-available/localhost"
# - name: webserver | apache | link sites-available to sites-enabled for localhost
# file:
# path: "/etc/apache/sites-enabled/localhost"
# state: link
# src: "/etc/apache/sites-available/localhost"
# notify: restart_apache
# - include_tasks: configure_apache_snmpd.yml

18
roles/webserver/tasks/install_nginx.yml Normal file
View File

@@ -0,0 +1,18 @@
- name: webserver | nginx | installing nginx
package:
name: "{{ nginx_package }}"
state: latest
- name: webserver | nginx | setup localhost for statistics
copy:
src: "nginx_localhost"
dest: "/etc/nginx/sites-available/localhost"
- name: webserver | nginx | link sites-available to sites-enabled for localhost
file:
path: "/etc/nginx/sites-enabled/localhost"
state: link
src: "/etc/nginx/sites-available/localhost"
notify: restart_nginx
- include_tasks: configure_nginx_snmpd.yml

6
roles/webserver/tasks/install_php.yml Normal file
View File

@@ -0,0 +1,6 @@
- name: webserver | apache | installing php
package:
name:
- php
- php-mysqli
state: latest

22
roles/webserver/tasks/main.yml Normal file
View File

@@ -0,0 +1,22 @@
# Load distro-specific variables
- include_vars: "{{ ansible_distribution }}.yml"
tags: always
- block:
- debug:
msg: Debug
# install software
- import_tasks: install_apache.yml
when:
- apache is defined
- apache == true
- import_tasks: install_nginx.yml
when:
- nginx is defined
- nginx == true
- import_tasks: install_php.yml
- name: webserver | certbot | install certbot
package:
name: certbot
state: latest
- include_tasks: apps/apps.yml

60
roles/webserver/templates/nextcloud/config.php.j2 Normal file
View File

@@ -0,0 +1,60 @@
<?php
$CONFIG = array (
'instanceid' => '{{ instanceid }}',
'passwordsalt' => '{{ passwordsalt }}',
'trusted_domains' =>
array (
0 => 'tantooine.myfirewall.org',
1 => 'geonosis.universe.local',
2 => 'geonosis',
),
'datadirectory' => '/Daten/owncloud/data/',
'dbtype' => 'mysql',
'version' => '24.0.2.1',
'dbname' => '{{ dbname }}',
'dbhost' => '{{ dbhost }}',
'dbtableprefix' => '{{ dbtableprefix }}',
'dbuser' => '{{ dbuser }}',
'dbpassword' => '{{ dbpassword }}',
'default_phone_region' => 'DE',
'installed' => true,
'theme' => '',
'maintenance' => true,
'secret' => '{{ secret }}',
'ldapIgnoreNamingRules' => false,
'forcessl' => true,
'forceSSLforSubdomains' => true,
'overwrite.cli.url' => 'https://tantooine.myfirewall.org/nextcloud',
'mail_smtpmode' => 'smtp',
'mail_from_address' => '{{ mail_from_address }}',
'mail_domain' => '{{ mail_domain }}',
'mail_smtphost' => '{{ mail_smtphost }}',
'mail_smtpport' => '{{ mail_smtpport }}',
'has_internet_connection' => true,
'updatechecker' => true,
'memcache.local' => '\\OC\\Memcache\\APCu',
'check_for_working_htaccess' => true,
'loglevel' => 0,
'log_rotate_size' => 104857600,
'trashbin_retention_obligation' => 'auto, auto',
'updater.release.channel' => 'stable',
'ldapProviderFactory' => '\\OCA\\User_LDAP\\LDAPProviderFactory',
'mail_smtpauthtype' => 'LOGIN',
'integrity.check.disabled' => true,
'redis' =>
array (
'host' => 'localhost',
'port' => '6379',
'timeout' => 1.5,
),
'mysql.utf8mb4' => true,
'app_install_overwrite' =>
array (
0 => 'calendar',
1 => 'tasks',
2 => 'ocsms',
3 => 'files_readmemd',
),
'encryption.legacy_format_support' => false,
'encryption.key_storage_migrated' => false,
);

27
roles/webserver/vars/Debian.yml Normal file
View File

@@ -0,0 +1,27 @@
apache_package: apache2
nginx_package: nginx
acme_package: acme
webuser: www-data
nextcloud_php_packages:
- package: php8.0
- package: libapache2-mod-php8.0
- package: php8.0-fpm
- package: libapache2-mod-fcgid
- package: php8.0-curl
- package: php8.0-gd
- package: php8.0-mbstring
- package: php8.0-xml
- package: php8.0-zip
- package: php8.0-mysql
- package: php8.0-apcu
- package: php8.0-bcmath
- package: php8.0-bz2
- package: php8.0-gmp
- package: php8.0-imagick
- package: php8.0-imap
- package: php8.0-intl
- package: php8.0-ldap
- package: php8.0-memcache
- package: php8.0-redis
- package: php8.0-smbclient

27
roles/webserver/vars/Ubuntu.yml Normal file
View File

@@ -0,0 +1,27 @@
apache_package: apache2
nginx_package: nginx
acme_package: acme
webuser: www-data
nextcloud_php_packages:
- package: php8.0
- package: libapache2-mod-php8.0
- package: php8.0-fpm
- package: libapache2-mod-fcgid
- package: php8.0-curl
- package: php8.0-gd
- package: php8.0-mbstring
- package: php8.0-xml
- package: php8.0-zip
- package: php8.0-mysql
- package: php8.0-apcu
- package: php8.0-bcmath
- package: php8.0-bz2
- package: php8.0-gmp
- package: php8.0-imagick
- package: php8.0-imap
- package: php8.0-intl
- package: php8.0-ldap
- package: php8.0-memcache
- package: php8.0-redis
- package: php8.0-smbclient

26
roles/webserver/vars/nextcloud.yml Normal file
View File

@@ -0,0 +1,26 @@
$ANSIBLE_VAULT;1.1;AES256
37353535366162623439373564306434376564326462326139323131333664663937313634313665
6564393039653231663433646630646462306266666435310a303632646636356139656561323933
63376565643266313563393135363033383234323031626465346335393762306139613261663664
3339393161666262340a373562646538336137323833303139343331356266373064353361646533
34363566646433333534313866323839623466306132613734356263393763666638373364633931
66303035663035306131633639376236393966346566616334616536313134623933316338373133
33626232303838633132613732653331626531336366383166313833353062656331376637336161
32666439303238333365323538636636346134383337383433303863623965316430643730303230
62363737633763363035346531643332343935363432326630323735356131376636343830366434
35386661383833376663333031373764613739626165626132653632346430633166393436313731
39646538346438666134633539666436643961353639393761326132366239363231316631613663
63313733363435353965626465623935383062656635396534373538323931616135373865336632
33333931353637663838333039613063353562346134663037396138323733323261663036363634
63383966326138346539653932383632356465393962383265626336643538396466323934633634
64663865633063613433306332306234303635346634303937643935373035353337373637626262
66666535653965333161386665613034613835646438326161643766653232303430333636646633
38363335313136393533616366323533663939643230626238616632353130666537336661633432
39333430663563633866636436363937363634303462373065303363373231346236303931636230
64643464306663313231326665373264323030343831366532643438666463646236643939316631
34383335326438633364356338353334353061333565376631356263663465623866656635383030
34303932393666316562653435343166393436376135613466663366393033333938376230383139
35373434653866313233363037666431316630316166656638616634636339383834653265333034
64303138336166663732633134343164373135386135666164373462633530636231303139653863
30386239663861666565366361633565336333313065373130623063363235653963373564313434
3430