77eb5dfb66
In converting this to ansible I forgot to install the reprepro keytab. The encoded secret has been added for production. Change-Id: I39d586e375ad96136cc151a7aed6f4cd5365f3c7
91 lines
1.7 KiB
YAML
91 lines
1.7 KiB
YAML
- name: Install afsadmin keytab
|
|
shell: 'echo "{{ reprepro_keytab }}" | base64 -d > /etc/reprepro.keytab'
|
|
args:
|
|
creates: /etc/reprepro.keytab
|
|
no_log: True
|
|
|
|
- name: Ensure permissions on reprepro keytab
|
|
file:
|
|
path: '/etc/reprepro.keytab'
|
|
owner: root
|
|
group: root
|
|
mode: '0400'
|
|
|
|
- name: Install reprepro
|
|
package:
|
|
name:
|
|
- reprepro
|
|
state: present
|
|
|
|
- name: Ensure config directory
|
|
file:
|
|
path: /etc/reprepro
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: Ensure key storage
|
|
file:
|
|
path: /etc/reprepro-gpg-keys
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: Ensure log directory
|
|
file:
|
|
path: /var/log/reprepro
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: Ensure run directory
|
|
file:
|
|
path: /var/run/reprepro
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: '0755'
|
|
|
|
- name: Rotate logfiles
|
|
include_role:
|
|
name: logrotate
|
|
vars:
|
|
logrotate_file_name: '/var/log/reprepro/*'
|
|
logrotate_config_file_name: 'reprepro'
|
|
logrotate_frequency: 'weekly'
|
|
|
|
- name: Install mirror script
|
|
copy:
|
|
src: reprepro-mirror-update
|
|
dest: /usr/local/bin/
|
|
owner: root
|
|
group: root
|
|
mode: 0755
|
|
|
|
- name: Debian
|
|
include_tasks: debian.yaml
|
|
|
|
- name: Debian Ceph
|
|
include_tasks: debian-ceph.yaml
|
|
|
|
- name: Debian security
|
|
include_tasks: debian-security.yaml
|
|
|
|
- name: Docker
|
|
include_tasks: docker.yaml
|
|
|
|
- name: Puppetlabs
|
|
include_tasks: puppetlabs.yaml
|
|
|
|
- name: Ubuntu
|
|
include_tasks: ubuntu.yaml
|
|
|
|
- name: Ubuntu Cloud Archive
|
|
include_tasks: ubuntu-cloud-archive.yaml
|
|
|
|
- name: Ubuntu Ports
|
|
include_tasks: ubuntu-ports.yaml
|