Skip to content
Extraits de code Groupes Projets
Valider 3c98744c rédigé par Rémi - Le Filament's avatar Rémi - Le Filament
Parcourir les fichiers

[UPD] ansible-lint

parent e9b1569b
Aucune branche associée trouvée
Aucune étiquette associée trouvée
Aucune requête de fusion associée trouvée
---
warn_list: # or 'skip_list' to silence them completely
- git-latest # Git checkouts must contain explicit version
- ignore-errors # Use failed_when and specify error conditions instead of using ignore_errors
- no-changed-when # Commands should not change things if nothing needs doing
- no-handler # Tasks that run when changed should likely be handlers
- package-latest # Package installs should not use latest
---
# Based on ansible-lint config
extends: default
rules:
braces:
max-spaces-inside: 1
level: error
brackets:
max-spaces-inside: 1
level: error
colons:
max-spaces-after: -1
level: error
commas:
max-spaces-after: -1
level: error
# comments enable
comments: enable
comments-indentation: enable
document-start: enable
empty-lines:
max: 3
level: error
hyphens:
level: error
indentation:
level: warning
indent-sequences: consistent
spaces: 4
check-multi-line-strings: true
key-duplicates: enable
line-length: disable
new-line-at-end-of-file: enable
new-lines:
type: unix
# trailing-spaces enable
trailing-spaces: enable
truthy: enable
--- ---
- name: restart-sshd - name: Restart SSHD
service: name=sshd state=restarted ansible.builtin.service:
name: sshd
state: restarted
--- ---
galaxy_info: galaxy_info:
author: Rémi author: lefilament
description: Role to configure backup server to allow SFTP connection from all other servers description: Role to configure backup server to allow SFTP connection from all other servers
company: Le Filament (https://le-filament.com) company: Le Filament (https://le-filament.com)
license: AGPL-3.0-or-later license: AGPL-3.0-or-later
min_ansible_version: 2.1 min_ansible_version: "2.1"
platforms: platforms:
- name: EL
versions:
- 7
- name: Ubuntu - name: Ubuntu
versions: versions:
- bionic - bionic
......
--- ---
- name: Create SFTP group - name: Create SFTP group
group: ansible.builtin.group:
name: sftpgroup name: sftpgroup
- name: Create SFTP users - name: Create SFTP users
user: ansible.builtin.user:
name: "{{ hostvars[item].backup_sftp_user }}" name: "{{ hostvars[item].backup_sftp_user }}"
group: sftpgroup group: sftpgroup
password: "!" password: "!"
shell: /sbin/nologin shell: /sbin/nologin
with_items: "{{ groups.all | difference(groups.backup_server) }}" with_items: "{{ groups.all | difference(groups.backup_server) }}"
- name: add SFTP users public key to authorized keys - name: Add SFTP users public key to authorized keys
authorized_key: ansible.posix.authorized_key:
key: "{{ hostvars[item].host_user_public_key }}" key: "{{ hostvars[item].host_user_public_key }}"
user: "{{ hostvars[item].backup_sftp_user }}" user: "{{ hostvars[item].backup_sftp_user }}"
exclusive: true exclusive: true
with_items: "{{ groups.all | difference(groups.backup_server) }}" with_items: "{{ groups.all | difference(groups.backup_server) }}"
- name: create templates directory - name: Create templates directory
file: ansible.builtin.file:
name: templates name: templates
state: directory state: directory
mode: '0755' mode: '0755'
...@@ -30,7 +30,7 @@ ...@@ -30,7 +30,7 @@
tags: sshd tags: sshd
- name: Get sshd_config file from init_server role locally - name: Get sshd_config file from init_server role locally
get_url: ansible.builtin.get_url:
url: "https://sources.le-filament.com/lefilament/ansible-roles/init_server/-/raw/master/templates/sshd_config.j2" url: "https://sources.le-filament.com/lefilament/ansible-roles/init_server/-/raw/master/templates/sshd_config.j2"
dest: templates/sshd_config.j2 dest: templates/sshd_config.j2
mode: '0644' mode: '0644'
...@@ -40,31 +40,31 @@ ...@@ -40,31 +40,31 @@
tags: sshd tags: sshd
- name: Copy sshd_config file - name: Copy sshd_config file
template: ansible.builtin.template:
src: templates/sshd_config.j2 src: templates/sshd_config.j2
dest: /etc/ssh/sshd_config dest: /etc/ssh/sshd_config
owner: root owner: root
group: root group: root
mode: '0644' mode: '0644'
notify: restart-sshd notify: Restart SSHD
tags: sshd tags: sshd
- name: add pip package - name: Add pip package
apt: ansible.builtin.apt:
name: "{{ python_apt_packages }}" name: "{{ python_apt_packages }}"
force: true force: true
install_recommends: false install_recommends: false
- name: check that chroot directory for SFTP users exist - name: Check that chroot directory for SFTP users exist
file: ansible.builtin.file:
name: /backup/sftp name: /backup/sftp
state: directory state: directory
owner: root owner: root
group: root group: root
mode: '0755' mode: '0755'
- name: check that directories for SFTP for all servers exist - name: Check that directories for SFTP for all servers exist
file: ansible.builtin.file:
name: /backup/sftp/{{ hostvars[item].inventory_hostname | lower }} name: /backup/sftp/{{ hostvars[item].inventory_hostname | lower }}
state: directory state: directory
owner: "{{ hostvars[item].backup_sftp_user }}" owner: "{{ hostvars[item].backup_sftp_user }}"
...@@ -72,8 +72,8 @@ ...@@ -72,8 +72,8 @@
mode: '0755' mode: '0755'
with_items: "{{ groups.all | difference(groups.backup_server) }}" with_items: "{{ groups.all | difference(groups.backup_server) }}"
- name: check that directory for collecting openstack Cloud facts exists - name: Check that directory for collecting openstack Cloud facts exists
file: ansible.builtin.file:
name: /backup/{{ item }} name: /backup/{{ item }}
state: directory state: directory
owner: lefilament owner: lefilament
...@@ -85,12 +85,12 @@ ...@@ -85,12 +85,12 @@
- odoo2 - odoo2
- versions - versions
- name: install swift client - name: Install swift client
pip: ansible.builtin.pip:
name: "{{ swift_pip_packages }}" name: "{{ swift_pip_packages }}"
- name: Copy OpenStack Fact Collection scripts on server - name: Copy OpenStack Fact Collection scripts on server
template: ansible.builtin.template:
src: "{{ item.script }}.j2" src: "{{ item.script }}.j2"
dest: /root/{{ item.script }} dest: /root/{{ item.script }}
owner: root owner: root
...@@ -100,8 +100,8 @@ ...@@ -100,8 +100,8 @@
loop_control: loop_control:
label: '{{ item.name }}' label: '{{ item.name }}'
- name: add cron job to retrieve backup list every day - name: Add cron job to retrieve backup list every day
cron: ansible.builtin.cron:
name: "{{ item.name }}" name: "{{ item.name }}"
minute: "{{ item.minute }}" minute: "{{ item.minute }}"
hour: "{{ item.hour }}" hour: "{{ item.hour }}"
......
0% Chargement en cours ou .
You are about to add 0 people to the discussion. Proceed with caution.
Veuillez vous inscrire ou vous pour commenter