From 36cb1aaba7fb0f79ae4916adfa1026f5b93095fd Mon Sep 17 00:00:00 2001 From: Nils Philippsen Date: Fri, 19 Mar 2021 17:25:38 +0100 Subject: [PATCH] ipa/client: enable for unbound in prod Signed-off-by: Nils Philippsen --- inventory/group_vars/unbound | 2 +- playbooks/groups/unbound.yml | 4 +--- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/inventory/group_vars/unbound b/inventory/group_vars/unbound index 029f66fc6a..e7a6db9e91 100644 --- a/inventory/group_vars/unbound +++ b/inventory/group_vars/unbound @@ -11,7 +11,7 @@ custom_rules: [ '-A INPUT -p tcp -m tcp -s 209.132.184.0/24 --dport 53 -j ACCEPT '-A INPUT -p tcp -m tcp -s 209.132.181.0/24 --dport 53 -j ACCEPT', '-A INPUT -p udp -m udp -s 209.132.181.0/24 --dport 53 -j ACCEPT' ] -fas_client_groups: sysadmin-dns +primary_auth_source: ipa ipa_host_group: unbound ipa_host_group_desc: Unbound caching DNS ipa_client_shell_groups: diff --git a/playbooks/groups/unbound.yml b/playbooks/groups/unbound.yml index 29ab79a899..327c97de49 100644 --- a/playbooks/groups/unbound.yml +++ b/playbooks/groups/unbound.yml @@ -15,8 +15,7 @@ - rkhunter - nagios_client - hosts - - { role: ipa/client, when: env == "staging" } - - { role: fas_client, when: env != "staging" } + - ipa/client - collectd/base - unbound - sudo @@ -27,7 +26,6 @@ - import_tasks: "{{ tasks_path }}/yumrepos.yml" tasks: - - import_tasks: "{{ tasks_path }}/2fa_client.yml" - import_tasks: "{{ tasks_path }}/motd.yml" handlers: