85 lines
2.2 KiB
YAML
85 lines
2.2 KiB
YAML
---
|
|
- name: Add elements to user account template
|
|
file:
|
|
path: "/etc/skel/{{ item.path }}"
|
|
state: "{{ item.state }}"
|
|
mode: "{{ item.mode }}"
|
|
with_items:
|
|
- { path: log, mode: "0750", state: directory }
|
|
- { path: awstats, mode: "0750", state: directory }
|
|
- { path: www, mode: "0750", state: directory }
|
|
- { path: log/access.log, mode: "0644", state: touch }
|
|
- { path: log/error.log, mode: "0644", state: touch }
|
|
|
|
- name: Force DIR_MODE to 0750 in /etc/adduser.conf
|
|
lineinfile:
|
|
dest: /etc/adduser.conf
|
|
regexp: '^DIR_MODE='
|
|
line: 'DIR_MODE=0750'
|
|
|
|
- name: Check if Apache envvars have a PATH
|
|
command: "grep -E '^export PATH ' /etc/apache2/envvars"
|
|
failed_when: False
|
|
changed_when: False
|
|
register: envvar_grep_path
|
|
#check_mode: no (for migration to Ansible 2.2)
|
|
always_run: yes
|
|
|
|
- name: Add a PATH envvar for Apache
|
|
blockinfile:
|
|
dest: /etc/apache2/envvars
|
|
marker: "## {mark} ANSIBLE MANAGED BLOCK FOR PATH"
|
|
block: |
|
|
# Used for Evoadmin-web
|
|
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
when: envvar_grep_path.rc != 0
|
|
|
|
- name: Additional packages are installed
|
|
apt:
|
|
name: '{{ item }}'
|
|
state: present
|
|
with_items:
|
|
- apache2-mpm-itk
|
|
- libapache2-mod-evasive
|
|
- libapache2-mod-security2
|
|
|
|
- name: Copy Apache settings for modules
|
|
copy:
|
|
src: "{{ item }}"
|
|
dest: "/etc/apache2/conf-available/{{ item }}"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
force: no
|
|
with_items:
|
|
- evolinux-itk.conf
|
|
- evolinux-evasive.conf
|
|
- evolinux-modsec.conf
|
|
|
|
- name: Ensure Apache modules configs are enabled
|
|
command: "a2enconf {{ item }}"
|
|
register: command_result
|
|
changed_when: "'Enabling' in command_result.stderr"
|
|
with_items:
|
|
- evolinux-itk
|
|
- evolinux-evasive
|
|
- evolinux-modsec
|
|
|
|
- name: Check if log2mail is installed
|
|
command: "apt list --installed log2mail"
|
|
register: command_result
|
|
changed_when: False
|
|
|
|
- debug:
|
|
var: command_result
|
|
|
|
- name: Add log2mail config for Apache segfaults
|
|
template:
|
|
src: log2mail-apache.j2
|
|
dest: "/etc/log2mail/config/apache"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
force: no
|
|
when: "'log2mail' in command_result.stdout"
|