playbooks/ansible_playbook_servers
1
0
Fork 0
mirror of https://github.com/DO1JLR/ansible_playbook_servers.git synced 2024-09-14 19:53:56 +02:00
Code Releases Activity

enable ansible vault

Browse source
This commit is contained in:
L3D 2021-01-02 22:37:59 +01:00
parent a6529a762e
commit 090ec6c881
Signed by: l3d
GPG key ID: CD08445BFF4313D1
6 changed files with 20 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.gitignore vendored
View file

@ -22,3 +22,4 @@ tags
# ---> Ansible # ---> Ansible
*.retry *.retry
*.vault *.vault
.vault

3
.gitmodules vendored
View file

@ -46,3 +46,6 @@
[submodule "roles/unbound"] [submodule "roles/unbound"]
path = roles/unbound path = roles/unbound
url = git@git.ccczh.ch:ansible-roles/role-unbound.git url = git@git.ccczh.ch:ansible-roles/role-unbound.git
[submodule "roles/geerlingguy.mysql"]
path = roles/geerlingguy.mysql
url = https://github.com/geerlingguy/ansible-role-mysql.git

2
ansible.cfg
View file

@ -16,7 +16,7 @@ stdout_callback = yaml
interpreter_python = /usr/bin/python3 interpreter_python = /usr/bin/python3
# vault_password_file =./.vault vault_password_file =./.vault
[ssh_connection] [ssh_connection]
control_path = %(directory)s/%%h-%%r-%%p control_path = %(directory)s/%%h-%%r-%%p

13
host_vars/mail01.l3d.space.yml
View file

@ -37,3 +37,16 @@ firewall_allowed_tcp_ports:
- "80" - "80"
- "443" - "443"
fail2ban_destemail: "fail2ban_notify_{{ inventory_hostname }}@l3d.yt" fail2ban_destemail: "fail2ban_notify_{{ inventory_hostname }}@l3d.yt"
# mysql
mysql_bind_address: '127.0.0.1'
mysql_root_password: super-secure-password
mysql_databases:
- name: example_db
encoding: latin1
collation: latin1_general_ci
mysql_users:
- name: example_user
host: "%"
password: similarly-secure-password
priv: "example_db.*:ALL"

1
roles/geerlingguy.mysql Submodule

@ -0,0 +1 @@
Subproject commit 4940d8cd41e40320f52ea694a0b169b03034c735

1
site.yml
View file

@ -35,5 +35,6 @@
- { role: acmetool_fix, tags: [mail,acmetool]} - { role: acmetool_fix, tags: [mail,acmetool]}
- { role: acmetool2, tags: [mail,acmetool]} - { role: acmetool2, tags: [mail,acmetool]}
- { role: nginx2, tags: [mail,nginx]} - { role: nginx2, tags: [mail,nginx]}
- { role: geerlingguy.mysql, tags: [mail,mysql,mariadb]}
- { role: robertdebock.dovecot, tags: [mail,postfix]} - { role: robertdebock.dovecot, tags: [mail,postfix]}
# - { role: dovecot, tags: [mail,dovecot]} # - { role: dovecot, tags: [mail,dovecot]}