update..

2020-09-25 18:44:17 +02:00
parent 0d2b61b611
commit f78a7f3565
44 changed files with 18354 additions and 236 deletions
--- a/group_vars/all/main.yml
+++ b/group_vars/all/main.yml
@ -2,9 +2,22 @@
 ---


-# ---
+# ==========
+# vars used by roles/common/tasks/basic.yml
+# ==========
+
+time_zone: Europe/Berlin
+
+locales:
+  - en_US.UTF-8
+  - de_DE.UTF-8
+
+set_default_limit_nofile: false
+
+
+# ==========
 # vars used by roles/common/tasks/apt.yml
-# ---
+# ==========

 apt_manage_sources_list: true

@ -496,21 +509,86 @@ apt_remove:
 apt_remove_purge: false


-# ---
-# Samba
-# ---
-
-apt_install_server_samba:
-  - samba
-
-apt_install_client_samba:
-  - samba-client
-  - samba-common
+# ==========
+# vars used by roles/common/tasks/git.yml
+# ==========

 # ---
-# CUPS
+# default
 # ---

+git_default_repositories:
+
+  # script repositories (destination /root/bin/)
+  - name: admin-stuff
+    repo: https://git.oopen.de/script/admin-stuff
+    dest: /root/bin/admin-stuff
+
+# ---
+# group [file_server]
+# ---
+
+git_oopen_server_repositories:
+
+  # install repositories (destination: /usr/local/src/)
+  # mailsystem
+  - name: mailsystem
+    repo: https://git.oopen.de/install/mailsystem
+    dest: /usr/local/src/mailsystem
+
+  # script repositories (destination /root/bin/)
+  # Monitoring
+  - name: monitoring
+    repo: https://git.oopen.de/script/monitoring
+    dest: /root/bin/monitoring
+
+  # script repositories (destination /root/bin/)
+  - name: backup-rcopy
+    repo: https://git.oopen.de/backup/backup-rcopy
+    dest: /root/crontab/backup-rcopy
+
+
+
+# ---
+# group [samba_server]
+# ---
+
+git_samba_repositories:
+
+  # script repositories (destination /root/bin/)
+  - name: samba
+    repo: https://git.oopen.de/script/samba
+    dest: /root/bin/samba
+
+
+# ---
+# group [gateway_server]
+# ---
+
+git_gateway_repositories:
+
+  # install repositories (destination: /usr/local/src/)
+  # mailsystem
+  - name: mailsystem
+    repo: https://git.oopen.de/install/mailsystem
+    dest: /usr/local/src/mailsystem
+
+  # firewall
+  - name: ipt-gateway
+    repo: https://git.oopen.de/firewall/ipt-gateway
+    dest: /usr/local/src/ipt-gateway
+
+  # script repositories (destination /root/bin/)
+  # Monitoring
+  - name: monitoring
+    repo: https://git.oopen.de/script/monitoring
+    dest: /root/bin/monitoring
+
+
+# ==========
+# vars used by roles/common/tasks/cups-install.yml
+# ==========
+
 apt_install_server_cups_buster:
  - cups

@ -526,9 +604,9 @@ apt_install_client_cups:
  - printer-driver-hpcups


-# ---
-# NFS
-# ---
+# ==========
+# vars used by roles/common/tasks/nfs.yml
+# ==========

 nfs_server: 192.168.82.10

@ -547,99 +625,65 @@ nfs_exports:
       - 192.168.63.0/24
     fs_encrypted: false

-# ---
-# Samba / NIS
-# ---
+
+# ==========
+# vars used by roles/common/tasks/samba-install.yml
+# ==========
+
+apt_install_server_samba:
+  - samba
+  - nscd
+
+apt_install_client_samba:
+  - samba-client
+  - samba-common

 samba_server: file-akb.akb.netz

-samba_shares:
-  - name: Transfer
-    user:
-      - anna
-      - buero
-      - chris 
-      - jibran
-      - praktikum
-      - maica
-      - julia
-      - fsj
-      - thomas
-      - frauke
-  - name: Verwaltung
-    user:
-      - anna
-      - jonas
-      - buero
-      - birgit
-      - chris
-      - jibran
-      - praktikum
-      - maica
-      - julia
-      - fsj
-      - thomas
-      - frauke
-  - name: Scans
-    user:
-      - anna
-      - buero
-      - birgit
-      - chris
-      - jibran
-      - praktikum
-      - maica
-      - julia
-      - fsj
-      - thomas
-      - frauke
-  - name: Buero_Scans
-    user:
-      - buero
-  - name: Frauke_Scans
-    user:
-      - frauke
-  - name: FSJ_Scans
-    user:
-      - fsj
-  - name: Jibran_Scans
-    user:
-      - jibran
-  - name: Julia_Scans
-    user:
-      - julia
-  - name: Maica_scans
-    user:
-      - maica
-  - name: Thomas_Scans
-    user:
-      - thomas
-  - name: Birgit_Scans
-    user:
-      - birgit
-  - name: Kamera
-    user:
-      - anna
-      - buero
-      - chris
-      - kamera
-      - praktikum
-      - maica
-      - thomas
-      - frauke
-  - name: Install
-    user:
-      - anna
-      - buero
-      - chris
-      - kamera
-      - praktikum
-      - maica
-      - thomas
-      - frauke

+# ==========
+# vars used by roles/common/tasks/user.yml
+# ==========
+
+# ! Notice !
+#
+# On NIS supported Server put your users and groups in the
+# appropriate section for playbook 'nis-user.yml'
+# 
+# ! Notice !
+
+#remove_system_users: []
+remove_system_users:
+  - name: test
+
+system_users: []
+#system_users:
+#  - name: test
+#    password: 'test100'
+
+#system_users:
+#
+#  - name: sysadm
+#    password: '9xFXkdPR_2'
+
+system_groups: []
+
+base_home: /home
+
+
+# ==========
+# vars used by roles/common/tasks/nis-install-server.yml
+# vars used by roles/common/tasks/nis-user.yml
+# vars used by roles/common/tasks/nis-install-client.yml
+# ==========
+
+# used by templates
+#    - yp.conf.j2
+#    - defaultdomain.j2
 nis_domain: akb.netz

+# also used by template
+#    - yp.conf.j2
 nis_server_address: 192.168.82.10

 nis_server_name: file-akb.akb.netz
@ -648,9 +692,6 @@ nis_common_packages:
  - nis
  - nscd

-nis_deleted_user:
-   - name: frank
-

 nis_base_home: /data/home

@ -664,6 +705,10 @@ nis_groups:
  - name: scans
    group_id: 1012

+#nis_deleted_user:
+remove_nis_users:
+   - name: frank
+
 nis_user:
  - name: chris
    groups:
@ -681,11 +726,6 @@ nis_user:
          3865353333373661390a643564386432643532396632323664383330646430613033643130626430
          6139

-  - name: sysadm
-    groups: []
-    is_samba_user: false
-    password: '9xFXkdPR_2'
-
  - name: anna
    groups:
      - intern
@ -795,56 +835,130 @@ nis_user:
    password: '20-birgit_20%'


+# ==========
+# vars used by roles/common/tasks/samba-user.yml
+# ==========

-# ---
-# vars used by roles/ansible_dependencies
-# ---
-
-apt_ansible_dependencies:
-  - python
-  - python-apt
-  - python3
-  - python3-apt
-  - lsb-release
-  - apt-transport-https
-  - dbus
-  - sudo
-  - vim
-  - net-tools
-  - vlan
+# ! Notice !
+#
+# variables used from other previos sections:
+#
+#    - remove_system_users:   roles/common/tasks/user.yml
+#    - remove_nis_users:      roles/common/tasks/nis-install-server.yml
+#    - nis_user:              roles/common/tasks/nis-install-server.yml


-# ---
-# vars used by roles/ansible_user
-# ---
+# ==========
+# vars used by roles/common/tasks/mount_samba_shares.yml
+# ==========

-ssh_keys_admin:
-  - 'ssh-rsa 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 chris@luna'
-  - 'ssh-rsa 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 root@luna'
+# ! Notice !
+#
+# variables used from other previos sections:
+#
+#    - nis_user:              roles/common/tasks/nis-install-server.yml

-ansible_remote_user:
-  - name: chris
-    password: $6$yac6oA6k$W9oRZ9sKVhg16072IlfHWD8Hp4BZh5Wn8rsNYenMhwEm5j1EsQZxzo43jAOv5b63uhkwEczpYyE2EvFvxAh9p/
-    shell: /bin/bash
+samba_shares:
+  - name: Transfer
+    user:
+      - anna
+      - buero
+      - chris 
+      - jibran
+      - praktikum
+      - maica
+      - julia
+      - fsj
+      - thomas
+      - frauke
+  - name: Verwaltung
+    user:
+      - anna
+      - jonas
+      - buero
+      - birgit
+      - chris
+      - jibran
+      - praktikum
+      - maica
+      - julia
+      - fsj
+      - thomas
+      - frauke
+  - name: Scans
+    user:
+      - anna
+      - buero
+      - birgit
+      - chris
+      - jibran
+      - praktikum
+      - maica
+      - julia
+      - fsj
+      - thomas
+      - frauke
+  - name: Buero_Scans
+    user:
+      - buero
+  - name: Frauke_Scans
+    user:
+      - frauke
+  - name: FSJ_Scans
+    user:
+      - fsj
+  - name: Jibran_Scans
+    user:
+      - jibran
+  - name: Julia_Scans
+    user:
+      - julia
+  - name: Maica_scans
+    user:
+      - maica
+  - name: Thomas_Scans
+    user:
+      - thomas
+  - name: Birgit_Scans
+    user:
+      - birgit
+  - name: Kamera
+    user:
+      - anna
+      - buero
+      - chris
+      - kamera
+      - praktikum
+      - maica
+      - thomas
+      - frauke
+  - name: Install
+    user:
+      - anna
+      - buero
+      - chris
+      - kamera
+      - praktikum
+      - maica
+      - thomas
+      - frauke
+
+
+# ==========
+# vars used by roles/common/tasks/user-systemfiles.yml
+# ==========
+
+# ! Notice !
+#
+# variables used from other previos sections:
+#
+#    - nis_user:              roles/common/tasks/nis-install-server.yml



-# ---
-# vars used by roles/common/tasks/basic.yml
-# ---
-
-time_zone: Europe/Berlin
-
-locales:
-  - en_US.UTF-8
-  - de_DE.UTF-8
-
-set_default_limit_nofile: false
-
-
-# ---
+# ==========
 # vars used by roles/common/tasks/sudoers.yml
-# ---
+# ==========

 sudo_users:
  - chris
@ -888,3 +1002,36 @@ sudoers_file_cmnd_aliases:

 sudoers_file_runas_aliases: []

+
+
+# ==========
+# vars used by roles/ansible_dependencies
+# ==========
+
+apt_ansible_dependencies:
+  - python
+  - python-apt
+  - python3
+  - python3-apt
+  - lsb-release
+  - apt-transport-https
+  - dbus
+  - sudo
+  - vim
+  - net-tools
+  - vlan
+
+
+# ==========
+# vars used by roles/ansible_user
+# ==========
+
+ssh_keys_admin:
+  - 'ssh-rsa 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 chris@luna'
+  - 'ssh-rsa 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 root@luna'
+
+ansible_remote_user:
+  - name: chris
+    password: $6$yac6oA6k$W9oRZ9sKVhg16072IlfHWD8Hp4BZh5Wn8rsNYenMhwEm5j1EsQZxzo43jAOv5b63uhkwEczpYyE2EvFvxAh9p/
+    shell: /bin/bash
+