klal

all.yml

@@ -65,3 +65,9 @@
     - name: sudoers
       role: sudoers
       tags: sudoers
+    - name: docker_packages
+      role: docker_packages
+      tags: docker_packages
+    - name: watcher
+      role: watcher
+      tags: watcher

roles/docker/handlers/main.yml

@@ -1,5 +1,5 @@
-- name: restart_docker
+- name: Restart_docker
   ansible.builtin.service:
     name: docker.service
     state: restarted
-  become: true
+  become: true

roles/docker_packages/tasks/main.yml

@@ -0,0 +1,8 @@
+- name: Install container packages
+  become: "{{ false if inventory_hostname == 'nas.home.lan' else true }}"
+  block:
+    - name: Create Banner
+      ansible.builtin.command: |
+        docker exec --user root zabbix-server-zabbix-server-1  apk add curl
+      register: logo
+      changed_when: "logo.rc == 0"

roles/omv_backup/tasks/main.yml

@@ -41,8 +41,15 @@
         owner: root
         group: root
       when: inventory_hostname != 'nas.home.lan'
-
+    - name: Upload exclude file
-
+      ansible.builtin.copy:
+        src: "{{ dest_folder }}/exclude.txt"
+        dest: /myapps/exclude.txt
+        remote_src: true
+        mode: '0755'
+        owner: root
+        group: root
+      when: inventory_hostname != 'nas.home.lan'
     - name: Upload requirements
       ansible.builtin.copy:
         src: "{{ dest_folder }}/requirements.txt"

roles/wake_on_lan/tasks/main.yml

@@ -4,22 +4,21 @@
     state: present
   become: true
 - name: Display all interfaces name
-  debug:
+  ansible.builtin.debug:
     var: ansible_facts.interfaces
 - name: Get wifi adapter
-  set_fact: 
+  ansible.builtin.set_fact: 
     active_adapter: '{{ item }}'
   loop: '{{ ansible_facts.interfaces }}'
   when: 'item.startswith("eno")'
 - name: Display all interfaces name
-  debug:
+  ansible.builtin.debug:
-    msg:  "{{ ansible_default_ipv4.interface }}"
+    msg: "{{ ansible_default_ipv4.interface }}"
 
 
 - name: Creating config
   become: true
   ansible.builtin.copy:
-    
     dest: "/etc/systemd/system/wol.service"
     content: |
       [Unit]
@@ -38,4 +37,4 @@
     name: wol
     state: restarted
     enabled: true
-  become: true
+  become: true

roles/watcher/files/omv_backup.service

@@ -0,0 +1,8 @@
+[Unit]
+Description=Enable OMV backup
+
+[Service]
+ExecStart = nohup /myapps/omv_backup.py -b > /dev/null  2>&1 &
+
+[Install]
+WantedBy=basic.target

roles/watcher/tasks/main.yml

@@ -0,0 +1,50 @@
+- name: Omv Setup
+  become: "{{ false if inventory_hostname == 'nas.home.lan' else true }}"
+  block:
+    - name: Include vault
+      ansible.builtin.include_vars:
+        file: jaydee.yml
+        name: mysecrets
+      when: inventory_hostname != 'nas.home.lan'
+    - name: Delete content & directory
+      ansible.builtin.file:
+        state: absent
+        path: "{{ dest_folder }}"
+    - name: Pull repo
+      tags:
+        - git_pull
+      ansible.builtin.git:
+        repo: "https://{{ mysecrets['git_user'] | urlencode }}:{{ mysecrets['git_password_mqtt'] | urlencode }}@gitlab.sectorq.eu/jaydee/watcher.git"
+        dest: "{{ dest_folder }}"
+        update: true
+        clone: true
+        version: main
+      when: inventory_hostname != 'nas.home.lan'
+    - name: Print
+      ansible.builtin.debug:
+        msg: "{{ inventory_hostname }}"
+
+    - name: Upload script
+      ansible.builtin.copy:
+        src: "{{ dest_folder }}/watcher.sh"
+        dest: /usr/bin/watcher.sh
+        remote_src: true
+        mode: '0755'
+        owner: root
+        group: root
+
+    - name: Upload service config
+      ansible.builtin.copy:
+        src: "{{ dest_folder }}/watcher.service"
+        dest: /etc/systemd/system/watcher.service
+        remote_src: true
+        mode: '0755'
+        owner: root
+        group: root
+
+    - name: Restart watcher service
+      ansible.builtin.service:
+        name: watcher
+        state: restarted
+        daemon_reload: true
+        enabled: true

roles/watcher/vars/main.yml

@@ -0,0 +1 @@
+dest_folder: "/tmp/ans_repo"

roles/zabbix-agent/tasks/main.yml

@@ -71,7 +71,7 @@
           - zabbix-agent2
           - zabbix-agent2-plugin-mongodb
           - zabbix-agent2-plugin-postgresql
-          #- zabbix-agent2-plugin-mysql
+          # - zabbix-agent2-plugin-mysql
         update_cache: true
 
       when: inventory_hostname != 'nas.home.lan'
@@ -81,7 +81,7 @@
           - zabbix-agent2
           - zabbix-agent2-plugin-mongodb
           - zabbix-agent2-plugin-postgresql
-          #- zabbix-agent2-plugin-mysql   
+          # - zabbix-agent2-plugin-mysql
         only_upgrade: true
         state: latest
       when: inventory_hostname != 'nas.home.lan'
@@ -138,7 +138,7 @@
         path: "{{ zabbix_agent_cfg }}"
         insertafter: '^# UserParameter='
         regexp: "^UserParameter=system.certs.*"
-        line: "UserParameter=system.certs,python3 /share/ZFS530_DATA/.qpkg/ZabbixAgent/cert_check2.py"
+        line: "UserParameter=system.certs, /share/ZFS530_DATA/.qpkg/QPython312/bin/python3 /share/Data/__GITLAB/cert_check/cert_check.py"
       when: inventory_hostname == 'nas.home.lan'
 
 
@@ -147,7 +147,7 @@
         path: "{{ zabbix_agent_cfg }}"
         insertafter: '^# UserParameter='
         regexp: "^UserParameter=system.certs.*"
-        line: "UserParameter=system.certs,python3 /usr/bin/cert_check2.py"
+        line: "UserParameter=system.certs,sudo /usr/bin/cert_check2.py"
       when: inventory_hostname == 'm-server.home.lan'
 
 
@@ -155,7 +155,8 @@
       ansible.builtin.lineinfile:
         path: "{{ zabbix_agent_cfg }}"
         insertafter: '^# UserParameter='
-        line: "UserParameter=rpi.hw.temp,/usr/bin/vcgencmd measure_temp"
+        regexp: "^UserParameter=rpi.hw.temp.*"
+        line: "UserParameter=rpi.hw.temp,/usr/bin/vcgencmd measure_temp|awk -F'=' '{ print $2 }'|sed \"s/'C//\""
       when: inventory_hostname == 'rpi5.home.lan'