diff --git a/group_vars/all/main.yml b/group_vars/all/main.yml index b56d3f2..70f2104 100644 --- a/group_vars/all/main.yml +++ b/group_vars/all/main.yml @@ -906,6 +906,9 @@ tor_hidden_service_port: munin_remote_ipv4: 135.181.136.84 munin_remote_ipv6: 2a01:4f9:3a:1051::84 +munin_remote_ipv4_old: 95.217.64.122 +munin_remote_ipv6_old: 2a01:4f9:4a:2b57::122 + # --- # vars used by cron.yml diff --git a/roles/modify-munin-ip/handlers/main.yml b/roles/modify-munin-ip/handlers/main.yml index 1dbd644..e9ab016 100644 --- a/roles/modify-munin-ip/handlers/main.yml +++ b/roles/modify-munin-ip/handlers/main.yml @@ -18,3 +18,10 @@ when: - interfaces_ipv6_exists.stat.exists - main_ipv6_exists.stat.exists + +- name: Restart munin-node + service: + name: munin-node + state: restarted + when: + - munin_node_exists.stat.exists diff --git a/roles/modify-munin-ip/tasks/main.yml b/roles/modify-munin-ip/tasks/main.yml index 57cec93..d175c64 100644 --- a/roles/modify-munin-ip/tasks/main.yml +++ b/roles/modify-munin-ip/tasks/main.yml @@ -14,7 +14,7 @@ - name: (modify-munin-ip - main.yml)) Set fact_sshd_kexalgorithms (comma separated list) set_fact: - fact_munin_node_ipv4_old: "{{ munin_remote_ipv4 | replace('.', '\\.') }}" + fact_munin_node_ipv4_old: "{{ munin_remote_ipv4_old | replace('.', '\\\\.') }}" when: - munin_remote_ipv4_old is defined and munin_remote_ipv4_old | length > 0 @@ -49,7 +49,7 @@ - name: (modify-munin-ip) Check if file '/etc/munin/munin-node.conf' exists stat: path: /etc/munin/munin-node.conf - register: munin_node__exists + register: munin_node_exists - name: (modify-munin-ip) /etc/ipt-firewall/main_ipv4.conf - addjust line 'munin_remote_ip' (IPv4) @@ -74,4 +74,26 @@ - Restart IPv6 Firewall +- name: (modify-munin-ip) /etc/munin/munin-node.conf - addjust line 'allow ^' (IPv4) + lineinfile: + path: /etc/munin/munin-node.conf + regexp: '^allow \^{{ fact_munin_node_ipv4_old }}' + line: 'allow ^{{ fact_munin_node_ipv4 }}$' + when: + - munin_node_exists.stat.exists + notify: + - Restart munin-node + + +- name: (modify-munin-ip) /etc/munin/munin-node.conf - addjust line 'allow ^' (IPv4) + lineinfile: + path: /etc/munin/munin-node.conf + regexp: '^allow \^{{ munin_remote_ipv6_old }}' + line: 'allow ^{{ munin_remote_ipv6 }}$' + when: + - munin_node_exists.stat.exists + notify: + - Restart munin-node + +