diff --git a/roles/zabbix_proxy/defaults/main.yml b/roles/zabbix_proxy/defaults/main.yml index e45e3cd..c8de746 100644 --- a/roles/zabbix_proxy/defaults/main.yml +++ b/roles/zabbix_proxy/defaults/main.yml @@ -1,3 +1,4 @@ zabbix_api_url: "https://zabbix.sectorq.eu/api_jsonrpc.php" dnf_proxy_host: "192.168.77.101" -dnf_proxy_port: "3128" \ No newline at end of file +dnf_proxy_port: "3128" +zabbix_user: jd \ No newline at end of file diff --git a/roles/zabbix_proxy/tasks/AlmaLinux.yml b/roles/zabbix_proxy/tasks/AlmaLinux.yml index 56e113a..11e7a54 100644 --- a/roles/zabbix_proxy/tasks/AlmaLinux.yml +++ b/roles/zabbix_proxy/tasks/AlmaLinux.yml @@ -1,4 +1,4 @@ -- name: Install Zabbix Proxy on Debian 13 +- name: Install Zabbix Proxy on AlmaLinux 10 vars: zabbix_version: "7.4" zabbix_server_ip: "192.168.77.101" @@ -20,6 +20,14 @@ set_fact: clustename: "alma10" + - name: Allow user to start/stop zabbix-proxy with sudo without password + ansible.builtin.copy: + dest: "/etc/sudoers.d/{{ zabbix_user }}-zabbix-proxy" + content: "{{ zabbix_user }} ALL=(ALL) NOPASSWD: /bin/systemctl start zabbix-proxy, /bin/systemctl stop zabbix-proxy" + owner: root + group: root + mode: '0440' + - name: Configure global DNF proxy ansible.builtin.lineinfile: path: /etc/dnf/dnf.conf diff --git a/roles/zabbix_proxy/tasks/Debian.yml b/roles/zabbix_proxy/tasks/Debian.yml index 0ee929d..bc57d6e 100644 --- a/roles/zabbix_proxy/tasks/Debian.yml +++ b/roles/zabbix_proxy/tasks/Debian.yml @@ -17,6 +17,15 @@ - name: Set proxy name set_fact: clustename: "debian13" + - name: Allow user to start/stop zabbix-proxy with sudo without password + ansible.builtin.copy: + dest: "/etc/sudoers.d/{{ zabbix_user }}-zabbix-proxy" + content: "{{ zabbix_user }} ALL=(ALL) NOPASSWD: /bin/systemctl start zabbix-proxy, /bin/systemctl stop zabbix-proxy" + owner: root + group: root + mode: '0440' + + - name: Show default IP ansible.builtin.debug: diff --git a/roles/zabbix_proxy/tasks/Rocky.yml b/roles/zabbix_proxy/tasks/Rocky.yml index 5ca0f4d..fc4c1b7 100644 --- a/roles/zabbix_proxy/tasks/Rocky.yml +++ b/roles/zabbix_proxy/tasks/Rocky.yml @@ -20,6 +20,15 @@ set_fact: clustename: "rocky9" + - name: Allow user to start/stop zabbix-proxy with sudo without password + ansible.builtin.copy: + dest: "/etc/sudoers.d/{{ zabbix_user }}-zabbix-proxy" + content: "{{ zabbix_user }} ALL=(ALL) NOPASSWD: /bin/systemctl start zabbix-proxy, /bin/systemctl stop zabbix-proxy" + owner: root + group: root + mode: '0440' + + - name: Configure global DNF proxy ansible.builtin.lineinfile: path: /etc/dnf/dnf.conf