configure-jump.yml
9a6369d950c2master

configure-jump.yml
View Options

			---
			- yum:
			name="{{ item }}"
			state=present
			with_items:
			- firewalld
			- nmap-ncat
			- haproxy
			- socat

			- service: name=firewalld state=restarted enabled=true

			- firewalld:
			port: "{{ item }}/tcp"
			permanent: true
			state: enabled
			immediate: true
			with_items:
			- 8000
			- 8080
			- 1234
			- 80
			- 443
			- 22

			- firewalld:
			port: "{{ item }}/tcp"
			source: '10.0.0.0/16'
			immediate: true
			permanent: true
			zone: internal
			state: enabled
			with_items:
			- 22
			- 111
			- 2049
			- 3306
			- 20048
			- 45817
			- 36778

			- firewalld:
			port: "{{ item }}/udp"
			source: '10.0.0.0/16'
			immediate: true
			permanent: true
			zone: internal
			state: enabled
			with_items:
			- 111
			- 2049
			- 20048
			- 54547
			- 44524

			- name: rsyslog for haproxy
			lineinfile:
			dest: /etc/rsyslog.conf
			line: "local2 /var/log/haproxy.log"
			notify: restart rsyslogd

			- name: Configure the haproxy cnf file with hosts
			template: src=haproxy.cfg.j2 dest=/etc/haproxy/haproxy.cfg
			notify: reload haproxy

			- name: Start the haproxy service
			service: name=haproxy state=started enabled=yes

			# Repository data

			- name: Create volume filesystem
			filesystem: fstype=ext4 dev=/dev/vdb

			- user: name="{{ phd_user }}"

			- name: Create nfs directory
			file:
			state: directory
			path: "{{ repositories_path }}"
			owner: "{{ phd_user }}"
			group: "{{ phd_user }}"
			mode: 0755

			- name: Mount repo volume
			mount:
			name: "{{ repositories_path }}"
			src: "/dev/vdb"
			fstype: 'ext4'
			opts: 'defaults'
			state: 'mounted'