112 lines
2.7 KiB
YAML
112 lines
2.7 KiB
YAML
- hosts: localhost
|
|
connection: local
|
|
tasks:
|
|
|
|
- name: where
|
|
debug:
|
|
var: new_ip
|
|
|
|
# - meta: end_play
|
|
# ip, dns, gatewy saerch actuel to delete before update
|
|
|
|
# - name: unset ip via nmcli
|
|
# nmcli:
|
|
# type: ethernet
|
|
# conn_name: "{{ ansible_default_ipv4.interface }}"
|
|
# state: absent
|
|
|
|
# - meta: end_play
|
|
|
|
- name: set ip via nmcli
|
|
nmcli:
|
|
type: ethernet
|
|
conn_name: "{{ ansible_default_ipv4.interface }}"
|
|
ip4: "{{ new_ip }}/24"
|
|
gw4: "{{ new_gw }}"
|
|
dns4: "{{ new_dns }}"
|
|
method4: manual
|
|
dns4_search:
|
|
- "{{ new_search }}"
|
|
state: present
|
|
|
|
- name: down interface to apply the change
|
|
nmcli:
|
|
conn_name: "{{ ansible_default_ipv4.interface }}"
|
|
state: down
|
|
|
|
- name: up interface to apply change
|
|
nmcli:
|
|
conn_name: "{{ ansible_default_ipv4.interface }}"
|
|
state: up
|
|
|
|
- name: config DNS
|
|
template:
|
|
src: named/named.conf.j2
|
|
dest: "{{ dns_conf_file }}"
|
|
|
|
- name: config zone
|
|
template:
|
|
src: named/stage-ge.org.zone.j2
|
|
dest: "{{ zone_file }}"
|
|
|
|
|
|
- name: create reverse script
|
|
template:
|
|
src: scripts/createrevers.sh.j2
|
|
dest: /tmp/createrevers.sh
|
|
mode: 0755
|
|
|
|
- name: create reverse file
|
|
shell: /tmp/createrevers.sh
|
|
|
|
- name: block enable proxy
|
|
block:
|
|
- name: copy proxy.sh to profile
|
|
copy:
|
|
src: os/proxy.sh
|
|
dest: /etc/profile.d/proxy.sh
|
|
- name: add proxy line to yum.conf
|
|
lineinfile:
|
|
path: /etc/yum.conf
|
|
insertafter: EOF
|
|
line: proxy=http://proxy.ville-geneve.ch:8080
|
|
- name: create folder for proxy docker
|
|
file:
|
|
path: /etc/systemd/system/docker.service.d
|
|
state: directory
|
|
- name: copy proxy config for docker
|
|
copy:
|
|
src: os/proxy.conf
|
|
dest: /etc/systemd/system/docker.service.d/proxy.conf
|
|
# - name: get root VDG CA
|
|
# get_url:
|
|
# url: "http://intranet.ville-ge.ch/certs/{{ item }}"
|
|
# dest: "/etc/pki/ca-trust/source/anchors/{{ item }}"
|
|
# with_items:
|
|
# - rootcavdg_ROOTVDG-CA.crt
|
|
# - adsubca.crt
|
|
- name: update ca trust
|
|
shell: update-ca-trust
|
|
changed_when: false
|
|
when: proxy|bool
|
|
|
|
- name: block disabe proxy
|
|
block:
|
|
- name: remove proxy.sh file
|
|
file:
|
|
path: /etc/profile.d/proxy.sh
|
|
state: absent
|
|
- name: remove proxy line from yum.conf
|
|
lineinfile:
|
|
path: /etc/yum.conf
|
|
regexp: '^proxy'
|
|
state: absent
|
|
- name: remove proxy config for docker
|
|
file:
|
|
dest: /etc/systemd/system/docker.service.d/proxy.conf
|
|
state: absent
|
|
when: not proxy|bool
|
|
|
|
- name: restart all service
|
|
include_tasks: restart-services.yml
|