Files
fedora-infra_ansible/playbooks/groups/backup-server.yml
Nils Philippsen 2d4ec8d259 Apply openvpn/client role before ipa/client
This is so hosts on the Fedora VPN are able to talk to IPA before they
try to enroll.

Signed-off-by: Nils Philippsen <nils@redhat.com>
2021-03-24 18:19:11 +01:00

40 lines
1.0 KiB
YAML

# create a new backup server system
# NOTE: should be used with --limit most of the time
# NOTE: make sure there is room/space for this instance on the buildvmhost
# NOTE: most of these vars_path come from group_vars/backup_server or from hostvars
- name: make backup server system
hosts: backup
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- base
- rkhunter
- nagios_client
- hosts
- openvpn/client
- ipa/client
- sudo
- collectd/base
- { role: nfs/client,
mnt_dir: '/fedora_backups',
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3",
nfs_src_dir: 'fedora_backups' }
- grokmirror_mirror
pre_tasks:
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
tasks:
- import_tasks: "{{ tasks_path }}/motd.yml"
- import_tasks: "{{ tasks_path }}/rdiff_backup_server.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"