ansible-roles/proftpd/tasks/main.yml

---
- name: package is installed
  apt:
    name: proftpd-basic
    state: present
  tags:
    - proftpd
    - packages

- name: ftpusers groupe exists
  group:
    name: ftpusers
    state: present
  notify: restart proftpd
  tags:
    - proftpd

- name: FTP jail is installed
  template:
    src: evolinux.conf.j2
    dest: /etc/proftpd/conf.d/z-evolinux.conf
    mode: "0644"
    force: "{{ proftpd_ftp_override }}"
  notify: restart proftpd
  when: proftpd_ftp_enable | bool
  tags:
    - proftpd

- name: FTPS jail is installed
  template:
    src: ftps.conf.j2
    dest: /etc/proftpd/conf.d/ftps.conf
    mode: "0644"
    force: "{{ proftpd_ftps_override }}"
  notify: restart proftpd
  when: proftpd_ftps_enable | bool
  tags:
    - proftpd

- name: SFTP jail is installed
  template:
    src: sftp.conf.j2
    dest: /etc/proftpd/conf.d/sftp.conf
    mode: "0644"
    force: "{{ proftpd_sftp_override }}"
  notify: restart proftpd
  when: proftpd_sftp_enable | bool
  tags:
    - proftpd

- name: SFTP key folder exists if needed
  file:
    path: /etc/proftpd/sftp.authorized_keys/
    state: directory
    mode: "0755"
    owner: root
    group: root
  notify: restart proftpd
  when: 
    - proftpd_sftp_enable | bool
    - proftpd_sftp_use_publickeys | bool
  tags:
    - proftpd

- name: mod_tls_memcache is disabled
  replace:
    dest: /etc/proftpd/modules.conf
    regexp: '^LoadModule mod_tls_memcache.c'
    replace: '#LoadModule mod_tls_memcache.c'
  notify: restart proftpd
  tags:
    - proftpd

- name: Put empty vpasswd file if missing
  copy:
    src: vpasswd
    dest: /etc/proftpd/vpasswd
    force: no
  notify: restart proftpd
  tags:
    - proftpd

# Why 440? Because should be edited with ftpasswd.
# So, readonly when opened with vim.
# Then readable by group.
- name: Enforce permissions on password file
  file:
    path: /etc/proftpd/vpasswd
    mode: "0440"
    owner: root
    group: root
  notify: restart proftpd
  tags:
    - proftpd

- include: accounts.yml
  when: proftpd_accounts | length > 0
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`---`
			`- name: package is installed`
			`apt:`
			`name: proftpd-basic`
replace "state: installed" with "state: present" 2017-01-12 17:37:48 +01:00			`state: present`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`tags:`
whitespaces 2017-12-04 13:50:21 +01:00			`- proftpd`
			`- packages`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
			`- name: ftpusers groupe exists`
			`group:`
			`name: ftpusers`
			`state: present`
			`notify: restart proftpd`
			`tags:`
whitespaces 2017-12-04 13:50:21 +01:00			`- proftpd`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
proftpd: add FTPS and SFTP support 2019-01-24 11:47:03 +01:00			`- name: FTP jail is installed`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`template:`
			`src: evolinux.conf.j2`
			`dest: /etc/proftpd/conf.d/z-evolinux.conf`
Change mode with leading 0, but still as String 2017-03-23 16:59:43 +01:00			`mode: "0644"`
proftpd: Add options to override configs 2022-09-13 16:26:10 +02:00			`force: "{{ proftpd_ftp_override }}"`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`notify: restart proftpd`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: proftpd_ftp_enable \| bool`
proftpd: add FTPS and SFTP support 2019-01-24 11:47:03 +01:00			`tags:`
			`- proftpd`

			`- name: FTPS jail is installed`
			`template:`
			`src: ftps.conf.j2`
			`dest: /etc/proftpd/conf.d/ftps.conf`
			`mode: "0644"`
proftpd: Add options to override configs 2022-09-13 16:26:10 +02:00			`force: "{{ proftpd_ftps_override }}"`
proftpd: add FTPS and SFTP support 2019-01-24 11:47:03 +01:00			`notify: restart proftpd`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: proftpd_ftps_enable \| bool`
proftpd: add FTPS and SFTP support 2019-01-24 11:47:03 +01:00			`tags:`
			`- proftpd`

			`- name: SFTP jail is installed`
			`template:`
			`src: sftp.conf.j2`
			`dest: /etc/proftpd/conf.d/sftp.conf`
			`mode: "0644"`
proftpd: Add options to override configs 2022-09-13 16:26:10 +02:00			`force: "{{ proftpd_sftp_override }}"`
proftpd: add FTPS and SFTP support 2019-01-24 11:47:03 +01:00			`notify: restart proftpd`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: proftpd_sftp_enable \| bool`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`tags:`
whitespaces 2017-12-04 13:50:21 +01:00			`- proftpd`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
proftpd: Allow user auth with ssh keys 2022-09-13 16:29:59 +02:00			`- name: SFTP key folder exists if needed`
			`file:`
			`path: /etc/proftpd/sftp.authorized_keys/`
			`state: directory`
proftpd: Fix mode of public key files and directory 2022-12-09 10:19:51 +01:00			`mode: "0755"`
proftpd: Allow user auth with ssh keys 2022-09-13 16:29:59 +02:00			`owner: root`
			`group: root`
			`notify: restart proftpd`
			`when:`
			`- proftpd_sftp_enable \| bool`
			`- proftpd_sftp_use_publickeys \| bool`
			`tags:`
			`- proftpd`

Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`- name: mod_tls_memcache is disabled`
			`replace:`
			`dest: /etc/proftpd/modules.conf`
			`regexp: '^LoadModule mod_tls_memcache.c'`
			`replace: '#LoadModule mod_tls_memcache.c'`
			`notify: restart proftpd`
			`tags:`
whitespaces 2017-12-04 13:50:21 +01:00			`- proftpd`
proftpd: blank vpasswd if missing 2017-10-05 18:46:40 +02:00
			`- name: Put empty vpasswd file if missing`
			`copy:`
			`src: vpasswd`
			`dest: /etc/proftpd/vpasswd`
			`force: no`
proftpd: enforce permissions on password file 2017-10-07 21:43:05 +02:00			`notify: restart proftpd`
			`tags:`
whitespaces 2017-12-04 13:50:21 +01:00			`- proftpd`
proftpd: enforce permissions on password file 2017-10-07 21:43:05 +02:00
			`# Why 440? Because should be edited with ftpasswd.`
			`# So, readonly when opened with vim.`
			`# Then readable by group.`
			`- name: Enforce permissions on password file`
			`file:`
			`path: /etc/proftpd/vpasswd`
proftpd: blank vpasswd if missing 2017-10-05 18:46:40 +02:00			`mode: "0440"`
proftpd: enforce permissions on password file 2017-10-07 21:43:05 +02:00			`owner: root`
			`group: root`
			`notify: restart proftpd`
proftpd: blank vpasswd if missing 2017-10-05 18:46:40 +02:00			`tags:`
whitespaces 2017-12-04 13:50:21 +01:00			`- proftpd`
proftpd: use proftpd_accounts list for create ftp accounts * need documentation * faster, easier, more robust and reliable than loop on include_role with account.yml task * account.yml task will be removed in future release 2018-02-27 17:10:25 +01:00
			`- include: accounts.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: proftpd_accounts \| length > 0`