Skip to content

Commit

Permalink
switch modules to fqdn
Browse files Browse the repository at this point in the history
  • Loading branch information
Sebastian Preisner committed Jan 5, 2024
1 parent 9203d7d commit b34394c
Show file tree
Hide file tree
Showing 7 changed files with 104 additions and 98 deletions.
23 changes: 13 additions & 10 deletions tasks/docker.yml
Original file line number Diff line number Diff line change
@@ -1,29 +1,29 @@
---
- name: Enable https support for apt
apt:
ansible.builtin.apt:
name: apt-transport-https
state: present
tags:
- apt_transport_https
- docker

- name: Check Docker apt key is present
apt_key:
ansible.builtin.apt_key:
url: https://download.docker.com/linux/ubuntu/gpg
state: present
tags:
- docker-apt_key
- docker

- name: Check Docker repo is enabled
apt_repository: repo="deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable" state=present
ansible.builtin.apt_repository: repo="deb [arch=amd64] https://download.docker.com/linux/ubuntu xenial stable" state=present
tags:
- docker-repositories
- repositories
- docker

- name: Check Docker packages are installed
apt:
ansible.builtin.apt:
name:
- docker-ce
- docker-ce-cli
Expand All @@ -34,35 +34,38 @@
- docker

- name: Enable Docker daemon on startup
systemd: name="docker" enabled=True state="started"
ansible.builtin.systemd:
name: "docker"
enabled: true
state: started
tags:
- enable_docker
- docker

- name: Set download location for desired docker-compose version
set_fact:
ansible.builtin.set_fact:
docker_compose_download_url: https://github.com/docker/compose/releases/download/{{ docker_compose_version }}/docker-compose-Linux-x86_64
when: docker_compose_version is defined and docker_compose_version != "latest"
tags:
- docker-compose

- name: Determine latest upstream release for docker-compose
uri:
ansible.builtin.uri:
url: https://api.github.com/repos/docker/compose/releases/latest
register: docker_compose_latest_json
when: docker_compose_download_url is undefined
tags:
- docker-compose

- name: Extract download location for latest docker-compose
set_fact:
ansible.builtin.set_fact:
docker_compose_download_url: "{{ docker_compose_latest_json.json.assets | selectattr('name', 'equalto', 'docker-compose-Linux-x86_64') | map(attribute='browser_download_url') | first | string }}"
when: docker_compose_download_url is undefined
tags:
- docker-compose

- name: Install up-to-date docker-compose
get_url:
ansible.builtin.get_url:
url: "{{ docker_compose_download_url }}"
dest: "/usr/local/bin/docker-compose"
owner: root
Expand All @@ -73,7 +76,7 @@
- docker-compose

- name: Remove outdated docker-compose from distribution
apt:
ansible.builtin.apt:
name: docker-compose
state: absent
tags:
Expand Down
15 changes: 7 additions & 8 deletions tasks/firewall.yml
Original file line number Diff line number Diff line change
@@ -1,49 +1,48 @@
---
- name: Install UFW firewall
apt:
ansible.builtin.apt:
name: ufw
state: present
tags:
- bbb_configure_ufw

- name: Allow OpenSSH access in firewall
ufw:
community.general.ufw:
rule: allow
name: OpenSSH
tags:
- bbb_configure_ufw

- name: Allow HTTP/HTTPS access in firewall
ufw:
community.general.ufw:
rule: allow
name: "Nginx Full"
tags:
- bbb_configure_ufw

- name: Allow media connections in firewall
ufw:
community.general.ufw:
rule: allow
proto: udp
port: 16384:32768
tags:
- bbb_configure_ufw

- name: Allow connections from SIP gateways in firewall
ufw:
community.general.ufw:
rule: allow
from: "{{ lookup('dig', item[0]) }}"
port: "5060,5080"
proto: "{{ item[1] }}"
comment: "SIP gateway"
loop: "{{ bbb_sip_providers.values() | map(attribute='proxy') | product(['tcp', 'udp']) | list }}"
when: bbb_sip_providers is defined
when: bbb_sip_providers is defined
tags:
- bbb_configure_ufw

- name: Enable firewall rules
ufw:
community.general.ufw:
state: enabled
policy: deny
tags:
- bbb_enable_ufw

4 changes: 2 additions & 2 deletions tasks/letsencrypt.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
- name: Create nginx SSL certificates directory
file:
ansible.builtin.file:
state: directory
path: /etc/nginx/ssl
owner: root
Expand All @@ -9,6 +9,6 @@
- bbb_letsencript_ssl_dir

- name: Create dhparam SSL file
command: openssl dhparam -dsaparam -out /etc/nginx/ssl/dhp-4096.pem 4096 creates=/etc/nginx/ssl/dhp-4096.pem
ansible.builtin.command: openssl dhparam -dsaparam -out /etc/nginx/ssl/dhp-4096.pem 4096 creates=/etc/nginx/ssl/dhp-4096.pem
tags:
- bbb_create_dhpem_file
Loading

0 comments on commit b34394c

Please sign in to comment.