66 lines
1.7 KiB
YAML
66 lines
1.7 KiB
YAML
---
|
|
|
|
- include_role:
|
|
name: remount-usr
|
|
|
|
- name: /usr/share/scripts exists
|
|
file:
|
|
dest: /usr/share/scripts
|
|
mode: "0700"
|
|
owner: root
|
|
group: root
|
|
state: directory
|
|
|
|
- name: minifirewall_status is installed
|
|
copy:
|
|
src: minifirewall_status
|
|
dest: /usr/share/scripts/minifirewall_status
|
|
force: "{{ minifirewall_force_update_nrpe_scripts | bool }}"
|
|
mode: "0700"
|
|
owner: root
|
|
group: root
|
|
|
|
- name: /usr/local/lib/nagios/plugins/ exists
|
|
file:
|
|
dest: "{{ nagios_plugins_directory }}"
|
|
mode: "02755"
|
|
owner: root
|
|
group: staff
|
|
state: directory
|
|
|
|
- name: check_minifirewall is installed
|
|
copy:
|
|
src: check_minifirewall
|
|
dest: "{{ nagios_plugins_directory }}/check_minifirewall"
|
|
force: "{{ minifirewall_force_update_nrpe_scripts | bool }}"
|
|
mode: "0755"
|
|
owner: root
|
|
group: staff
|
|
|
|
- name: Is NRPE installed?
|
|
stat:
|
|
path: /etc/nagios/nrpe.d/evolix.cfg
|
|
register: nrpe_evolix_cfg
|
|
|
|
- name: check_minifirewall is available for NRPE
|
|
lineinfile:
|
|
dest: /etc/nagios/nrpe.d/evolix.cfg
|
|
regexp: 'command\[check_minifirewall\]'
|
|
line: 'command[check_minifirewall]=sudo {{ nagios_plugins_directory }}/check_minifirewall'
|
|
notify: restart nagios-nrpe-server
|
|
when: nrpe_evolix_cfg.stat.exists
|
|
|
|
- name: Is evolinux sudoers installed?
|
|
stat:
|
|
path: /etc/sudoers.d/evolinux
|
|
register: sudoers_evolinux
|
|
|
|
- name: sudo without password for nagios
|
|
lineinfile:
|
|
dest: /etc/sudoers.d/evolinux
|
|
regexp: 'check_minifirewall'
|
|
line: 'nagios ALL = NOPASSWD: {{ nagios_plugins_directory }}/check_minifirewall'
|
|
insertafter: '^nagios'
|
|
validate: "visudo -cf %s"
|
|
when: sudoers_evolinux.stat.exists
|