Jérémy Lecour
ee21973371
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2777|524|2253|2462|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/223//ansiblelint">Evolix » ansible-roles » unstable #223</a>
gitea/ansible-roles/pipeline/head This commit looks good
Fully Qualified Collection Name
66 lines
1.8 KiB
YAML
66 lines
1.8 KiB
YAML
---
|
|
|
|
- ansible.builtin.include_role:
|
|
name: evolix/remount-usr
|
|
|
|
- name: /usr/share/scripts exists
|
|
ansible.builtin.file:
|
|
dest: /usr/share/scripts
|
|
mode: "0700"
|
|
owner: root
|
|
group: root
|
|
state: directory
|
|
|
|
- name: minifirewall_status is installed
|
|
ansible.builtin.copy:
|
|
src: minifirewall_status
|
|
dest: /usr/share/scripts/minifirewall_status
|
|
force: "{{ minifirewall_force_update_nrpe_scripts | bool }}"
|
|
mode: "0700"
|
|
owner: root
|
|
group: root
|
|
|
|
- name: /usr/local/lib/nagios/plugins/ exists
|
|
ansible.builtin.file:
|
|
dest: "{{ nagios_plugins_directory }}"
|
|
mode: "02755"
|
|
owner: root
|
|
group: staff
|
|
state: directory
|
|
|
|
- name: check_minifirewall is installed
|
|
ansible.builtin.copy:
|
|
src: check_minifirewall
|
|
dest: "{{ nagios_plugins_directory }}/check_minifirewall"
|
|
force: "{{ minifirewall_force_update_nrpe_scripts | bool }}"
|
|
mode: "0755"
|
|
owner: root
|
|
group: staff
|
|
|
|
- name: Is NRPE installed?
|
|
ansible.builtin.stat:
|
|
path: /etc/nagios/nrpe.d/evolix.cfg
|
|
register: nrpe_evolix_cfg
|
|
|
|
- name: check_minifirewall is available for NRPE
|
|
ansible.builtin.lineinfile:
|
|
dest: /etc/nagios/nrpe.d/evolix.cfg
|
|
regexp: 'command\[check_minifirewall\]'
|
|
line: 'command[check_minifirewall]=sudo {{ nagios_plugins_directory }}/check_minifirewall'
|
|
notify: restart nagios-nrpe-server
|
|
when: nrpe_evolix_cfg.stat.exists
|
|
|
|
- name: Is evolinux sudoers installed?
|
|
ansible.builtin.stat:
|
|
path: /etc/sudoers.d/evolinux
|
|
register: sudoers_evolinux
|
|
|
|
- name: sudo without password for nagios
|
|
ansible.builtin.lineinfile:
|
|
dest: /etc/sudoers.d/evolinux
|
|
regexp: 'check_minifirewall'
|
|
line: 'nagios ALL = NOPASSWD: {{ nagios_plugins_directory }}/check_minifirewall'
|
|
insertafter: '^nagios'
|
|
validate: "visudo -cf %s"
|
|
when: sudoers_evolinux.stat.exists
|