Quico/ansible-mail-infra
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

feat(firewall): Add dependencies for firewalld helper script

Browse Source
This commit is contained in:
hygienic-books 2022-07-06 01:11:22 +02:00
parent 6e67dadf27
commit 3eeb9baa57
2 changed files with 17 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -11,7 +11,7 @@ We're assuming that you're running Ansible as a Python package inside a virtual
pip install ansible pip install ansible
``` ```
We're also assuming that secrets are stored in a HashiCorp Vault instance to which you have access. These role access Vault via `hvac`, the HashiCorp Vault API client for Python 3.x, see [github.com/hvac/hvac](https://github.com/hvac/hvac) for reference. Install it like so: We're also assuming that secrets are stored in a HashiCorp Vault instance to which you have access. These roles access Vault via `hvac`, the HashiCorp Vault API client for Python 3.x, see [github.com/hvac/hvac](https://github.com/hvac/hvac) for reference. Install it like so:
``` ```
pip install hvac pip install hvac
``` ```

28
ansible/roles/50-service-mailcow/tasks/40-install-mailcow.yml
View File

@ -13,28 +13,34 @@
- name: 'Install Docker engine basics' - name: 'Install Docker engine basics'
tags:
- 'testing'
ansible.builtin.dnf: ansible.builtin.dnf:
name: name:
- 'yum-utils' - 'docker-ce' # Docker
- 'docker-ce' - 'docker-ce-cli' #
- 'docker-ce-cli' - 'containerd.io' #
- 'containerd.io' - 'docker-compose-plugin' #
- 'docker-compose-plugin' - 'git' # git clone Mailcow repo
- 'git' - '@Development tools' # Install 'update-firewall-source' Python package
state: 'latest' state: 'latest'
- name: 'Start systemd iptables.service'
ansible.builtin.systemd:
name: 'iptables.service'
state: 'started'
enabled: 'yes'
- name: 'Populate service facts' - name: 'Populate service facts'
tags:
- 'testing'
ansible.builtin.service_facts: ansible.builtin.service_facts:
- name: 'Store Docker daemon.json' - name: 'Store Docker daemon.json'
tags:
- 'testing'
register: 'rv_upload_daemonjson' register: 'rv_upload_daemonjson'
ansible.builtin.copy: ansible.builtin.copy:
src: 'etc/docker/daemon.json' src: 'etc/docker/daemon.json'
@ -48,8 +54,6 @@
- name: 'Start systemd docker.service' - name: 'Start systemd docker.service'
tags:
- 'testing'
when: '(ansible_facts.services[''docker.service''].state != ''running'')' when: '(ansible_facts.services[''docker.service''].state != ''running'')'
ansible.builtin.systemd: ansible.builtin.systemd:
name: 'docker.service' name: 'docker.service'