add spiped role
This commit is contained in:
		
							
								
								
									
										60
									
								
								roles/spiped/tasks/main.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										60
									
								
								roles/spiped/tasks/main.yaml
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,60 @@
 | 
			
		||||
---
 | 
			
		||||
- name: install package
 | 
			
		||||
  package:
 | 
			
		||||
    name: "{{ spiped_package_name }}"
 | 
			
		||||
    state: "{{ spiped_package_state }}"
 | 
			
		||||
 | 
			
		||||
- name: "create {{ spiped_user }} user"
 | 
			
		||||
  user:
 | 
			
		||||
    name: "{{ spiped_user }}"
 | 
			
		||||
    comment: "{{ spiped_user_comment }}"
 | 
			
		||||
    password: "{{ spiped_user_password }}"
 | 
			
		||||
    home: "{{ spiped_user_home }}"
 | 
			
		||||
    shell: "{{ spiped_user_shell }}"
 | 
			
		||||
    state: "{{ spiped_user_state }}"
 | 
			
		||||
    system: yes
 | 
			
		||||
    create_home: no
 | 
			
		||||
 | 
			
		||||
- name: create paths
 | 
			
		||||
  file:
 | 
			
		||||
    path: "{{ item }}"
 | 
			
		||||
    state: directory
 | 
			
		||||
    owner: root
 | 
			
		||||
    group: root
 | 
			
		||||
    mode: 0755
 | 
			
		||||
  loop:
 | 
			
		||||
    - "{{ spiped_etc_path }}"
 | 
			
		||||
 | 
			
		||||
- name: configure systemd unit
 | 
			
		||||
  template:
 | 
			
		||||
    src: spiped.service.j2
 | 
			
		||||
    dest: "/etc/systemd/system/spiped-{{ item.name }}.service"
 | 
			
		||||
    owner: root
 | 
			
		||||
    group: root
 | 
			
		||||
    mode: 0644
 | 
			
		||||
  loop: "{{ spiped_tunnels | default([]) }}"
 | 
			
		||||
  notify:
 | 
			
		||||
    - restart spiped tunnels
 | 
			
		||||
    - spiped daemon-reload
 | 
			
		||||
  when: ansible_service_mgr == 'systemd'
 | 
			
		||||
  no_log: true
 | 
			
		||||
 | 
			
		||||
- name: configure keys
 | 
			
		||||
  copy:
 | 
			
		||||
    dest: "{{ spiped_etc_path }}/{{ item.name }}.key"
 | 
			
		||||
    content: "{{ item.key | b64decode }}"
 | 
			
		||||
    owner: "{{ spiped_user }}"
 | 
			
		||||
    group: "{{ spiped_group }}"
 | 
			
		||||
    mode: 0400
 | 
			
		||||
  loop: "{{ spiped_tunnels | default([]) }}"
 | 
			
		||||
  notify:
 | 
			
		||||
    - restart spiped tunnels
 | 
			
		||||
  no_log: true
 | 
			
		||||
 | 
			
		||||
- name: manage services
 | 
			
		||||
  service:
 | 
			
		||||
    name: "spiped-{{ item.name }}.service"
 | 
			
		||||
    state: "{{ item.state | default('started') }}"
 | 
			
		||||
    enabled: "{{ item.enabled | default(true) }}"
 | 
			
		||||
  loop: "{{ spiped_tunnels | default([]) }}"
 | 
			
		||||
  no_log: true
 | 
			
		||||
		Reference in New Issue
	
	Block a user