mirror of
https://github.com/roles-ansible/ansible_role_ntp.git
synced 2024-08-16 12:59:49 +02:00
add ntp config
This commit is contained in:
parent
84e5ca63d3
commit
52488963c7
13 changed files with 130 additions and 3 deletions
|
@ -1,2 +1,25 @@
|
|||
---
|
||||
# defaults file for ansible-role-ntp
|
||||
# defaults file for ansible-role-ntp
|
||||
|
||||
# Restrict acces on ntp server
|
||||
# Default is: ::1, 127.0.0.1
|
||||
ntp_restrict:
|
||||
- default nomodify notrap nopeer noquery
|
||||
- 127.0.0.1
|
||||
- ::1
|
||||
|
||||
# Ntp server to use for date synchronization
|
||||
# Default is worldwide pool
|
||||
ntp_servers:
|
||||
- 0.pool.ntp.org iburst
|
||||
- 1.pool.ntp.org iburst
|
||||
- 2.pool.ntp.org iburst
|
||||
- 3.pool.ntp.org iburst
|
||||
|
||||
# Enable or disable ntp statistics
|
||||
# Default is false
|
||||
ntp_statistics: false
|
||||
|
||||
# Define timezone to use
|
||||
# Default is Etc/UTC
|
||||
ntp_timezone: Europe/London
|
||||
|
|
|
@ -1,2 +1,17 @@
|
|||
---
|
||||
# handlers file for ansible-role-ntp
|
||||
# handlers file for ansible-role-ntp
|
||||
|
||||
- name: Restart ntp daemons on Linux
|
||||
service:
|
||||
name: "{{ ntp_service }}"
|
||||
state: restarted
|
||||
|
||||
- name: Restart ntp daemons on FreeBSD
|
||||
service:
|
||||
name: "{{ ntp_service }}"
|
||||
state: restarted
|
||||
|
||||
- name: Restart ntp daemons on OpenBSD
|
||||
service:
|
||||
name: "{{ ntp_service }}"
|
||||
state: restarted
|
||||
|
|
15
tasks/config.yml
Normal file
15
tasks/config.yml
Normal file
|
@ -0,0 +1,15 @@
|
|||
---
|
||||
# Tasks file for config ntp daemon
|
||||
|
||||
- name: Define timezone to use
|
||||
timezone:
|
||||
name: "{{ ntp_timezone }}"
|
||||
|
||||
- name: seting-up ntp config
|
||||
template:
|
||||
src: ntp.conf.j2
|
||||
dest: "{{ ntp_configfile }}"
|
||||
owner: "{{ ntp_configfile_user }}"
|
||||
group: "{{ ntp_configfile_group }}"
|
||||
mode: 644
|
||||
notify: "Restart ntp daemons on {{ ansible_system }}"
|
|
@ -4,5 +4,8 @@
|
|||
- name: Include OS specific variables.
|
||||
include_vars: "{{ ansible_os_family }}.yml"
|
||||
|
||||
- name: Install ntp agent
|
||||
- name: Install ntp
|
||||
include_tasks: "packages/setup-{{ ansible_system }}.yml"
|
||||
|
||||
- name: Configure ntp
|
||||
include_tasks: config.yml
|
||||
|
|
19
templates/ntp.conf.j2
Normal file
19
templates/ntp.conf.j2
Normal file
|
@ -0,0 +1,19 @@
|
|||
#####################################
|
||||
## ##
|
||||
## THIS FILE IS MANAGED BY ANSIBLE ##
|
||||
## ##
|
||||
#####################################
|
||||
|
||||
driftfile {{ ntp_driftfile }}
|
||||
|
||||
{%- for restrict_ip in ntp_restrict -%}
|
||||
restrict {{ restrict_ip }}
|
||||
{%- endfor -%}
|
||||
|
||||
{%- for pool_server in ntp_servers -%}
|
||||
server {{ pool_server }}
|
||||
{%- endfor -%}
|
||||
|
||||
{%- if ntp_statistics -%}
|
||||
statistics clockstats cryptostats loopstats peerstats
|
||||
{%- endif -%}
|
17
tests/inspec/config_spec.rb
Normal file
17
tests/inspec/config_spec.rb
Normal file
|
@ -0,0 +1,17 @@
|
|||
# Test ntp config
|
||||
|
||||
ntp_configfile = '/etc/ntp.conf'
|
||||
|
||||
control 'config-01' do
|
||||
impact 1.0
|
||||
title 'Ntp server'
|
||||
desc 'Ntp worldwide servers should be present'
|
||||
describe file(ntp_configfile) do
|
||||
its('owner') { should eq 'root' }
|
||||
its('mode') { should cmp '0644' }
|
||||
its('content') { should match /server 0.pool.ntp.org iburst/ }
|
||||
its('content') { should match /server 1.pool.ntp.org iburst/ }
|
||||
its('content') { should match /server 2.pool.ntp.org iburst/ }
|
||||
its('content') { should match /server 3.pool.ntp.org iburst/ }
|
||||
end
|
||||
end
|
|
@ -1,2 +1,7 @@
|
|||
ntp_package: ntp
|
||||
ntp_service: ntpd
|
||||
|
||||
ntp_configfile: /etc/ntp.conf
|
||||
ntp_configfile_user: root
|
||||
ntp_configfile_group: root
|
||||
ntp_driftfile: /var/lib/ntp/drift
|
||||
|
|
|
@ -1,2 +1,7 @@
|
|||
ntp_package: ntp
|
||||
ntp_service: ntp
|
||||
|
||||
ntp_configfile: /etc/ntp.conf
|
||||
ntp_configfile_user: root
|
||||
ntp_configfile_group: root
|
||||
ntp_driftfile: /var/lib/ntp/drift
|
||||
|
|
|
@ -1,2 +1,7 @@
|
|||
ntp_package: ntp
|
||||
ntp_service: ntpd
|
||||
|
||||
ntp_configfile: /etc/ntp.conf
|
||||
ntp_configfile_user: root
|
||||
ntp_configfile_group: wheel
|
||||
ntp_driftfile: /var/lib/ntp/drift
|
||||
|
|
|
@ -1,2 +1,7 @@
|
|||
ntp_package: net-misc/ntp
|
||||
ntp_service: ntp-client
|
||||
|
||||
ntp_configfile: /etc/ntp.conf
|
||||
ntp_configfile_user: root
|
||||
ntp_configfile_group: root
|
||||
ntp_driftfile: /var/lib/ntp/drift
|
||||
|
|
|
@ -1,2 +1,7 @@
|
|||
ntp_package: ntp
|
||||
ntp_service: ntpd
|
||||
|
||||
ntp_configfile: /etc/ntp.conf
|
||||
ntp_configfile_user: root
|
||||
ntp_configfile_group: wheel
|
||||
ntp_driftfile: /var/lib/ntp/drift
|
||||
|
|
|
@ -1,2 +1,7 @@
|
|||
ntp_package: ntp
|
||||
ntp_service: ntpd
|
||||
|
||||
ntp_configfile: /etc/ntp.conf
|
||||
ntp_configfile_user: root
|
||||
ntp_configfile_group: root
|
||||
ntp_driftfile: /var/lib/ntp/drift
|
||||
|
|
|
@ -1,2 +1,7 @@
|
|||
ntp_package: ntp
|
||||
ntp_service: ntpd
|
||||
|
||||
ntp_configfile: /etc/ntp.conf
|
||||
ntp_configfile_user: root
|
||||
ntp_configfile_group: root
|
||||
ntp_driftfile: /var/lib/ntp/drift/ntp.drift
|
||||
|
|
Loading…
Reference in a new issue