Victor LABORIE
d0fcd1c2d1
* need documentation * faster, easier, more robust and reliable than loop on include_role with account.yml task * account.yml task will be removed in future release
61 lines
1.2 KiB
YAML
61 lines
1.2 KiB
YAML
---
|
|
- name: package is installed
|
|
apt:
|
|
name: proftpd-basic
|
|
state: present
|
|
tags:
|
|
- proftpd
|
|
- packages
|
|
|
|
- name: ftpusers groupe exists
|
|
group:
|
|
name: ftpusers
|
|
state: present
|
|
notify: restart proftpd
|
|
tags:
|
|
- proftpd
|
|
|
|
- name: local jail is installed
|
|
template:
|
|
src: evolinux.conf.j2
|
|
dest: /etc/proftpd/conf.d/z-evolinux.conf
|
|
mode: "0644"
|
|
force: no
|
|
notify: restart proftpd
|
|
tags:
|
|
- proftpd
|
|
|
|
- name: mod_tls_memcache is disabled
|
|
replace:
|
|
dest: /etc/proftpd/modules.conf
|
|
regexp: '^LoadModule mod_tls_memcache.c'
|
|
replace: '#LoadModule mod_tls_memcache.c'
|
|
notify: restart proftpd
|
|
tags:
|
|
- proftpd
|
|
|
|
- name: Put empty vpasswd file if missing
|
|
copy:
|
|
src: vpasswd
|
|
dest: /etc/proftpd/vpasswd
|
|
force: no
|
|
notify: restart proftpd
|
|
tags:
|
|
- proftpd
|
|
|
|
# Why 440? Because should be edited with ftpasswd.
|
|
# So, readonly when opened with vim.
|
|
# Then readable by group.
|
|
- name: Enforce permissions on password file
|
|
file:
|
|
path: /etc/proftpd/vpasswd
|
|
mode: "0440"
|
|
owner: root
|
|
group: root
|
|
notify: restart proftpd
|
|
tags:
|
|
- proftpd
|
|
|
|
- include: accounts.yml
|
|
when: proftpd_accounts != "[]"
|