bitwarden

playbooks/00_install_ldap_client.yml

@@ -1,7 +1,7 @@
 - hosts: datacenter
   name: Install omv
   become: true
-  gather_facts: no
+  gather_facts: false
   tasks:
     - name: Install ldap packages
       ansible.builtin.apt:
@@ -66,7 +66,7 @@
       ansible.builtin.lineinfile:
         path: /etc/nslcd.conf
         regexp: "^uri ldap.*"
-        line: "uri ldap://192.168.77.106:389/"
+        line: "uri ldap://192.168.77.101:2389/"
 
 
     - name: Reconfigure ldap base
@@ -79,13 +79,13 @@
     - name: Reconfigure nslcd binddn
       ansible.builtin.lineinfile:
         path: /etc/nslcd.conf
-        regexp: "^#binddn"
-        line: "binddn cn=admin,dc=sectorq,dc=eu"
+        regexp: "^binddn"
+        line: "binddn cn=jaydee,dc=users,dc=sectorq,dc=eu"
         
     - name: Reconfigure nslcd bindpw
       ansible.builtin.lineinfile:
         path: /etc/nslcd.conf
-        regexp: "^#bindpw"
+        regexp: "^bindpw"
         line: "bindpw {{ ldap_admin_password }}"
     # - name: Reconfigure ldap base
     #   ansible.builtin.lineinfile:
@@ -95,7 +95,7 @@
     - name: Reconfigure nslcd tls_reqcert
       ansible.builtin.lineinfile:
         path: /etc/nslcd.conf
-        regexp: "^#tls_reqcert"
+        regexp: "^tls_reqcert"
         line: "tls_reqcert allow"
     - name: Restart nslcd service
       ansible.builtin.service:
@@ -137,7 +137,7 @@
           # This file should be world readable but not world writable.
 
           BASE    dc=sectorq,dc=eu
-          URI     ldap://192.168.77.106:389
+          URI     ldap://192.168.77.101:2389
 
           #SIZELIMIT      12
           #TIMELIMIT      15

playbooks/install_mqtt_srv.yml

@@ -1,4 +1,4 @@
-- hosts: mqtt_srv
+- hosts: datacenter
   name: Install mqtt_srv
   ignore_unreachable: false
   ignore_errors: true

roles/monitoring/tasks/main.yml

@@ -72,7 +72,7 @@
     path: "{{ zabbix_agent_cfg }}"
     regexp: "^Server=.*"
     insertafter: '^# Server='
-    line: "Server=192.168.77.0/24"
+    line: "Server=192.168.77.0/24,192.168.80.0/24"
   become: "{{ false if inventory_hostname == 'nas.home.lan' else true }}"
 
 - name: Reconfigure zabbix agent ServerActive