管理变量和事实playbook

最新推荐文章于 2024-10-07 00:36:15 发布

WALKING_CODE

最新推荐文章于 2024-10-07 00:36:15 发布

阅读量105

点赞数

分类专栏： Linux学习文章标签：服务器 linux 运维

本文链接：https://blog.csdn.net/CSDNSQ2016/article/details/125767533

版权

Linux学习专栏收录该内容

8 篇文章 0 订阅

订阅专栏

管理变量和事实playbook

---
- name: install and configure webserver with basic auth
  hosts: webserver
  vars:
          firewall_pkg: firewalld
          firewall_svc: firewalld
          web_pkg: httpd
          web_svc: httpd
          ssl_pkg: mod_ssl
          httpdconf_src: files/httpd.conf
          httpdconf_dest: /etc/httpd/conf/httpd.conf
          htaccess_src: files/.htaccess
          secrets_dir: /etc/httpd/secrets
          secrets_src: files/htpasswd
          secrets_dest: "{{ secrets_dir }}/htpasswd"
          web_root: /var/www/html
  tasks:
          - name: latest version of necessary packages installed
            yum:
                    name:
                            - "{{ firewall_pkg }}"
                            - "{{ web_pkg }}"
                            - "{{ ssl_pkg }}"
                    state: latest
          - name: configure web service
            copy:
                    src: "{{ httpdconf_src }}"
                    dest: "{{ httpdconf_dest }}"
                    owner: root
                    group: root
                    mode: 0644
          - name: secrets directory exists
            file:
                    path: "{{ secrets_dir }}"
                    state: directory
                    owner: apache
                    group: apache
                    mode: 0500
          - name: htppasswd file exists
            copy:
                    src: "{{ secrets_src }}"
                    dest: "{{ secrets_dest }}"
                    owner: apache
                    group: apache
                    mode: 0400
          - name: .htaccess file installed in docroot
            copy:
                    src: "{{ htaccess_src }}"
                    dest: "{{ web_root }}/.htaccess"
                    owner: apache
                    group: apache
                    mode: 0400
          - name: create index.html
            copy:
                    content: "{{ ansible_facts['fqdn'] }} ({{ ansible_facts['default_ipv4']['address'] }}) has been customized by Ansible.\n"
                    dest: "{{ web_root }}/index.html"
          - name: firewall service enabled and started
            service:
                    name: "{{ firewall_svc }}"
                    state: started
                    enabled: true
          - name: open the port for the web server
            firewalld:
                    service: https
                    state: enabled
                    immediate: true
                    permanent: true

          - name: web service enabled and started
            service:
                    name: "{{ web_svc }}"
                    state: started
                    enabled: true

- name: test web server with basic auth
  hosts: localhost
  become: no
  vars:
          web_user: guest
  vars_files:
          - vars/secret.yml
  tasks:
          - name: connect to web server with basic auth
            uri:
                    url: https://serverb.lab.example.com
                    validate_certs: no
                    force_basic_auth: yes
                    user: "{{ web_user }}"
                    password: "{{ web_pass }}"
                    return_content: yes
                    status_code: 200
            register: auth_test
          - debug:
                  var: auth_test.content