mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-30 21:41:53 +08:00
a130888041
This deploys a new set of ccd files to bastion*rdu3 for openvpn. Right now bastion01.iad2 is the vpn hub/server for all connections. Once dns is changed and clients restarted, they will connect to bastion01.rdu3. These ccd files swap the iad2 for rdu3 servers. So, for example now 'wiki01.vpn.fedoraproject.org', or 'wiki01' as the proxies call it, will go to wiki01.iad2.fedoraproject.org. After the dns switch and client reconnects here, wiki01.vpn.fedoraproject.org/wiki01's ip will be claimed by wiki01.rdu3.fedoraproject.org instead and wiki01.iad2 will get a dynamic ip (or will be just turned off). This will allow us to more easly move services from proxies. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
34 lines
671 B
YAML
34 lines
671 B
YAML
---
|
|
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
|
|
vars:
|
|
myhosts: "bastion"
|
|
|
|
- name: Make the boxen be real for real
|
|
hosts: bastion
|
|
user: root
|
|
gather_facts: true
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
|
|
roles:
|
|
- base
|
|
- rkhunter
|
|
- openvpn/server
|
|
- ipa/client
|
|
- nagios_client
|
|
- hosts
|
|
- sudo
|
|
- collectd/base
|
|
- packager_alias
|
|
- opendkim
|
|
- fasjson
|
|
|
|
pre_tasks:
|
|
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
|
|
|
|
handlers:
|
|
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|