mirror of
https://gitlab.sectorq.eu/jaydee/ansible.git
synced 2025-01-23 20:39:26 +00:00
bitwarden
This commit is contained in:
jaydee
parent
0acc5967de
commit
4d19b05594
115
playbooks/00_install_zabbix_server.yml
Normal file
115
playbooks/00_install_zabbix_server.yml
Normal file
@ -0,0 +1,115 @@
|
|||||||
|
- hosts: datacenter
|
||||||
|
name: Install zabbix agent
|
||||||
|
become: true
|
||||||
|
vars:
|
||||||
|
ZABBIX_SERVER_IP: "192.168.77.216"
|
||||||
|
ZABBIX_DB_PASSWORD: "zabbix"
|
||||||
|
tasks:
|
||||||
|
- name: Print all available facts
|
||||||
|
ansible.builtin.debug:
|
||||||
|
var: ansible_facts.architecture
|
||||||
|
# - name: Upload zabbix package
|
||||||
|
# ansible.builtin.copy:
|
||||||
|
# src: packages/zabbix-release_6.4-1+ubuntu22.04_all.deb
|
||||||
|
# dest: /tmp/
|
||||||
|
|
||||||
|
- name: Install a .deb package from the internet
|
||||||
|
ansible.builtin.apt:
|
||||||
|
#deb: https://repo.zabbix.com/zabbix/6.4/debian/pool/main/z/zabbix-release/zabbix-release_6.4-1+debian12_all.deb
|
||||||
|
deb: https://repo.zabbix.com/zabbix/7.0/debian/pool/main/z/zabbix-release/zabbix-release_7.0-1+debian12_all.deb
|
||||||
|
when:
|
||||||
|
- ansible_facts.architecture != "armv7l" and ansible_distribution == "Debian" and ansible_distribution_major_version == "12"
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
# - name: Install a .deb package localy
|
||||||
|
# ansible.builtin.apt:
|
||||||
|
# deb: /tmp/zabbix-release_6.4-1+ubuntu22.04_all.deb
|
||||||
|
- name: Install zabbix packages
|
||||||
|
ansible.builtin.apt:
|
||||||
|
name:
|
||||||
|
- zabbix-agent2
|
||||||
|
- zabbix-agent2-plugin-*
|
||||||
|
- zabbix-server-pgsql
|
||||||
|
- zabbix-frontend-php
|
||||||
|
- php8.2-pgsql
|
||||||
|
- zabbix-nginx-conf
|
||||||
|
- zabbix-sql-scripts
|
||||||
|
- postgresql
|
||||||
|
- postgresql-client
|
||||||
|
update_cache: yes
|
||||||
|
|
||||||
|
- name: Apt exclude linux-dtb-current-meson64
|
||||||
|
ansible.builtin.shell: echo "CREATE USER zabbix password 'zabbix';" | su -c /usr/bin/psql postgres
|
||||||
|
- name: Apt exclude linux-dtb-current-meson64
|
||||||
|
ansible.builtin.shell: sudo -u postgres createdb -O zabbix zabbix
|
||||||
|
- name: Apt exclude linux-dtb-current-meson64
|
||||||
|
ansible.builtin.shell: zcat /usr/share/zabbix-sql-scripts/postgresql/server.sql.gz | sudo -u zabbix psql zabbix
|
||||||
|
|
||||||
|
- name: Reconfigure zabbix agent Server
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/zabbix/zabbix_server.conf
|
||||||
|
regexp: "^DBPassword=.*"
|
||||||
|
insertafter: '^# DBPassword='
|
||||||
|
line: "DBPassword={{ ZABBIX_DB_PASSWORD }}"
|
||||||
|
- name: Reconfigure zabbix agent Server
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/nginx/conf.d/zabbix.conf
|
||||||
|
regexp: "^# listen.*"
|
||||||
|
line: " listen 8080;"
|
||||||
|
- name: Reconfigure zabbix agent Server
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/nginx/conf.d/zabbix.conf
|
||||||
|
regexp: "^# server_name.*"
|
||||||
|
line: " server_name zabbix.sectorq.eu;"
|
||||||
|
|
||||||
|
|
||||||
|
- name: Reconfigure zabbix agent Server
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/zabbix/zabbix_agent2.conf
|
||||||
|
regexp: "^Server=.*"
|
||||||
|
insertafter: '^# Server='
|
||||||
|
line: "Server=192.168.77.0/24"
|
||||||
|
|
||||||
|
- name: Reconfigure zabbix agent ServerActive
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/zabbix/zabbix_agent2.conf
|
||||||
|
regexp: "^ServerActive=.*"
|
||||||
|
line: "ServerActive={{ ZABBIX_SERVER_IP }}"
|
||||||
|
- name: Reconfigure zabbix agent ListenPort
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/zabbix/zabbix_agent2.conf
|
||||||
|
regexp: "^ListenPort=.*"
|
||||||
|
line: "ListenPort=10050"
|
||||||
|
# - name: Reconfigure zabbix agent ListenIP
|
||||||
|
# ansible.builtin.lineinfile:
|
||||||
|
# path: /etc/zabbix/zabbix_agent2.conf
|
||||||
|
# regexp: "^ListenIP=.*"
|
||||||
|
# line: "ListenIP=0.0.0.0"
|
||||||
|
- name: Reconfigure zabbix-agent2 hostname
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/zabbix/zabbix_agent2.conf
|
||||||
|
regexp: "^Hostname=.*"
|
||||||
|
line: "Hostname={{ansible_hostname}}"
|
||||||
|
- name: Reconfigure zabbix-agent2 hostname
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/zabbix/zabbix_agent2.conf
|
||||||
|
regexp: "^UserParameter=.*"
|
||||||
|
insertafter: '^# UserParameter='
|
||||||
|
line: "UserParameter=system.temperature,vcgencmd measure_temp"
|
||||||
|
- name: Reconfigure zabbix-agent2 hostname
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/zabbix/zabbix_agent2.conf
|
||||||
|
regexp: "^HostMetadata=.*"
|
||||||
|
insertafter: '^# HostMetadata='
|
||||||
|
line: "HostMetadata=linux;jaydee"
|
||||||
|
|
||||||
|
- name: Restart zabbix-server service
|
||||||
|
ansible.builtin.service:
|
||||||
|
name: "{{ item }}"
|
||||||
|
state: restarted
|
||||||
|
enabled: true
|
||||||
|
loop:
|
||||||
|
- zabbix-server.service
|
||||||
|
- zabbix-agent2.service
|
||||||
|
- nginx.service
|
||||||
16
playbooks/00_install_zabbix_server_cert.yml
Normal file
16
playbooks/00_install_zabbix_server_cert.yml
Normal file
@ -0,0 +1,16 @@
|
|||||||
|
- hosts: datacenter
|
||||||
|
name: Install zabbix agent
|
||||||
|
become: true
|
||||||
|
tasks:
|
||||||
|
- name: Creating a file with content
|
||||||
|
copy:
|
||||||
|
dest: "/usr/share/zabbix/conf/certs/idp.crt"
|
||||||
|
content: "{{ ZABBIX_IDP_CERT }}"
|
||||||
|
- name: Creating a file with content
|
||||||
|
copy:
|
||||||
|
dest: "/usr/share/zabbix/conf/certs/sp.key"
|
||||||
|
content: "{{ ZABBIX_AUTH_KEY }}"
|
||||||
|
- name: Creating a file with content
|
||||||
|
copy:
|
||||||
|
dest: "/usr/share/zabbix/conf/certs/sp.crt"
|
||||||
|
content: "{{ ZABBIX_AUTH_CERT }}"
|
||||||
48
playbooks/setup_fog_nfs.yml
Normal file
48
playbooks/setup_fog_nfs.yml
Normal file
@ -0,0 +1,48 @@
|
|||||||
|
- hosts: datacenter
|
||||||
|
name: Setup nfs
|
||||||
|
gather_facts: false
|
||||||
|
tasks:
|
||||||
|
- name: Install nfs
|
||||||
|
ansible.builtin.apt:
|
||||||
|
name: nfs-kernel-server
|
||||||
|
state: present
|
||||||
|
when: inventory_hostname in groups['fog']
|
||||||
|
|
||||||
|
|
||||||
|
- name: Reconfigure common-session
|
||||||
|
ansible.builtin.lineinfile:
|
||||||
|
path: /etc/exports
|
||||||
|
regexp: "/images .*"
|
||||||
|
line: "/images *(rw,sync,no_wdelay,no_subtree_check,insecure_locks,no_root_squash,insecure,fsid=0)"
|
||||||
|
become: true
|
||||||
|
when: inventory_hostname in groups['fog']
|
||||||
|
- name: Restart autofs service
|
||||||
|
ansible.builtin.service:
|
||||||
|
name: nfs-kernel-server.service
|
||||||
|
state: restarted
|
||||||
|
become: true
|
||||||
|
when: inventory_hostname in groups['fog']
|
||||||
|
- name: Creating a file with content wol service
|
||||||
|
ansible.builtin.copy:
|
||||||
|
dest: "/etc/auto.fog"
|
||||||
|
content: |
|
||||||
|
fog-images -fstype=nfs 192.168.77.108:/images
|
||||||
|
become: true
|
||||||
|
when: inventory_hostname in groups['morefine']
|
||||||
|
|
||||||
|
- name: Restart autofs service
|
||||||
|
ansible.builtin.service:
|
||||||
|
name: autofs.service
|
||||||
|
state: restarted
|
||||||
|
become: true
|
||||||
|
when: inventory_hostname in groups['morefine']
|
||||||
|
|
||||||
|
# - name: Creating script to fetch ldap info
|
||||||
|
# ansible.builtin.copy:
|
||||||
|
# dest: "/usr/local/bin/fetchSSHKeysFromLDAP"
|
||||||
|
# content: |
|
||||||
|
# #!/bin/bash
|
||||||
|
# ldapsearch -b "dc=sectorq,dc=eu" -H ldap://192.168.77.106:389 -x '(&(objectClass=ldapPublicKey)(cn='"$1"'))' 'sshPublicKey' | sed -n '/^ /{H;d};/sshPublicKey:/x;$g;s/\n *//g;s/sshPublicKey: //gp'
|
||||||
|
# owner: admin
|
||||||
|
# mode: '0744'
|
||||||
|
# when: inventory_hostname in groups['nas']
|
||||||
Loading…
x
Reference in New Issue
Block a user