Skip to content

Latest commit

 

History

History
96 lines (56 loc) · 2.03 KB

Ansible.md

File metadata and controls

96 lines (56 loc) · 2.03 KB
Raw

FreshPorts Ansible configuration

Ansible configuration:

Assuming you are configuring r720-02-nginx01, a jail on r720-02.int.unixathome.org

NOTE: the jail can be named anything you want. r720-02-nginx01 is used only by Ansible.

Add this to ~/.ssh/config

host r720-02-freshports-nginx01
  user minion
  ProxyJump [email protected]
  hostname 127.163.0.80
  ForwardAgent yes

host r720-02-freshports-ingress01
  user minion
  ProxyJump [email protected]
  hostname 127.163.0.10
  ForwardAgent yes

Copy this template

svn cp TEMPLATE-freshports-nginx      r720-02-freshports-nginx01
svn cp TEMPLATE-freshports-ingress    r720-02-freshports-ingress01

Adjust values contained therein

hosts file

add r720-02-nginx01 to these hostgroups in the hosts file:

  • logcheck
  • nrpe
  • freshports_websites
  • freshports_websites_new
  • freshports_modules **** This may not be required

add r720-02-ingress01 to these hostgroups in the hosts file:

  • logcheck
  • nrpe
  • freshports_ingress
  • freshports_ingress_new
  • freshports_modules
  • freshports_scripts

New hostgroup for jails on the host

Create (if required) a new hostgroup (note all hyphens and periods must be converted to underscrores in the group name):

[r720_02_int_unixathome_org_jails]
r720-02-freshports-nginx01
r720-02-freshports-ingress01

Add this to group_vars

This will go into /etc/hosts on the jail host - this is carried out by the etc-hosts task in freshports-host.yml.

etc_hosts:
- "127.163.0.10  aws-1.freshports-ingress01"
- "127.163.0.80  aws-1.freshports-nginx01"

Based on the group name used above, create this file:

cd group_vars
svn cp TEMPLATE_freshports_host r720_02_int_unixathome.org_jails

Amend the values accordingly.

usually an IP address

fp_email_server:      '127.1.0.202'

fp_system_owner_email: '{{ admin_email }}'

Certificates

create and install certificates to /usr/local/etc/ssl