alanorth
/
ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity
486 Commits 2 Branches 0 Tags 4.5 MiB
Commit Graph

335 Commits

Author SHA1 Message Date
Alan Orth 1a870db3af Fix a few more Jinja2 filters used as tests 
I had created these earlier in this branch before rebasing it on top
of the Ansible 2.5.0 readiness branch.

See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
 2018-04-05 12:17:26 +03:00
Alan Orth 632aa1cf14 Fix a few more Jinja2 filters used as tests 
I had created these earlier in this branch before rebasing it on top
of the Ansible 2.5.0 readiness branch.

See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
 2018-04-05 12:17:26 +03:00
Alan Orth d1ba60e15d Use version_compare to test for Ubuntu 18.04 "bionic" 
It just feels more correct, plus I usually forget the release code
name from time to time.
 2018-04-05 12:17:26 +03:00
Alan Orth ed607aab68 roles/nginx: Use correct php-fpm socket on Ubuntu 18.04 2018-04-05 12:17:26 +03:00
Alan Orth 3396a98aad roles/php-fpm: Update note 2018-04-05 12:17:26 +03:00
Alan Orth 9f3ab01d48 roles/php-fpm: Use include instead of import for tasks 
These tasks are conditional and mutually exclusive due to the "when"
clause. Using import_tasks means that these are imported before the
playbook execution and then skipped during evaluation of the test.

It makes sense in this case to use include_tasks so that the tasks
are only imported during playbook execution if the condition is met.
 2018-04-05 12:17:26 +03:00
Alan Orth 7fc13d6331 roles/php-fpm: Improve task for Ubuntu 16.04 and Debian 9 2018-04-05 12:17:26 +03:00
Alan Orth 9675542f7d roles/php-fpm: Support php-fpm 7.2 on Ubuntu 18.04 
Adds a separate handler for the php-fpm7.2 service and cleans up the
pool config file to remove some content that causes Jinja2 to choke.
 2018-04-05 12:17:26 +03:00
Alan Orth 975a4d3f28 roles/php-fpm: Import php-fpm 7.2 configs 
From vanilla Ubuntu 18.04, diffed against current 7.0 templates.
 2018-04-05 12:17:26 +03:00
Alan Orth 28ba62a8a6 roles/common: Remove sysv-rc-conf from Ubuntu packages 
I haven't used this in years and it apparently doesn't exist in Ubuntu
18.04 anyways.
 2018-04-05 12:17:25 +03:00
Alan Orth 5c3553e684 roles/nginx: Use Ubuntu 17.10's packages on Ubuntu 18.04 
There are no nginx packages for Ubuntu 18.04 "bionic" yet so we
should use Ubuntu 17.10 "artful".
 2018-04-05 12:17:25 +03:00
Alan Orth 6c093801c4 roles/mariadb: Use Ubuntu 17.10's packages on Ubuntu 18.04 
There are no mariadb packages for Ubuntu 18.04 "bionic" yet so we
should use Ubuntu 17.10 "artful".
 2018-04-05 12:17:25 +03:00
Alan Orth c5bebf0336 roles/common: Use Ubuntu 17.10's tarsnap packages on Ubuntu 18.04 
There are no tarsnap packages for Ubuntu 18.04 "bionic" yet so we
should use Ubuntu 17.10 "artful".
 2018-04-05 12:17:25 +03:00
Alan Orth 10668ed706 roles/common: Update comment in ntp task 2018-04-05 12:17:25 +03:00
Alan Orth 19414041e7 roles/common: Add sshd config for Ubuntu 18.04 
From the default sshd_config with some cipher settings from the Debian
9 template.
 2018-04-05 12:17:25 +03:00
Alan Orth ab2961be61 roles/common: Update Tarsnap GPG key 
See: https://www.tarsnap.com/pkg-deb.html
 2018-04-05 12:17:25 +03:00
Alan Orth 57120308dc
Update with_items loops to use new-ish "loop" keyword 
Ansible 2.4 and 2.5 are moving away from specialized loop functions
and the old syntax will eventually be deprecated and removed. I did
not change the with_fileglob loops because I'm not sure about their
syntax yet.

See: https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html
 2018-04-02 15:52:51 +03:00
Alan Orth fbf61c8e61
roles/munin: Don't use loop when installing one package 2018-04-02 15:51:29 +03:00
Alan Orth ffee9250ee
Use new syntax for Jinja2 filters that are used as tests 
Ansible 2.5.0 uses a new syntax for Jinja2 filters that are used as
tests.

See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
 2018-04-02 15:37:37 +03:00
Alan Orth d155898bb1
Use new syntax for Jinj2 filters that are used as tests 
Ansible 2.5.0 uses a new syntax for Jinja2 filters that are used as
tests.

See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
 2018-03-21 21:17:21 +02:00
Alan Orth 52b4efd3b0
roles/common: Use HTTPS for tarsnap package mirror 2018-03-17 11:51:45 +02:00
Alan Orth 948058151a
roles/common: Fix issues raised by ansible-lint 
[ANSIBLE0010] Package installs should not use latest
 2017-12-29 20:11:55 +02:00
Alan Orth a5e6513be3
roles/dspace: Update gzip_types formatting 
From the H5BP project, see:

https://github.com/h5bp/server-configs-nginx/blob/master/nginx.conf
 2017-11-14 12:44:56 +02:00
Alan Orth 97aca2cad2
roles/nginx: Remove Internet Explorer 6 gzip disable 
I have zero idea if we have IE6 clients any more, but according to the
H5BP community IE6 actually did support gzip and only represents 0.1%
of Internet traffic in 2015 (!) anyways.

See: https://github.com/h5bp/server-configs-nginx/issues/125
 2017-11-14 12:43:02 +02:00
Alan Orth 92fe57a4da
Revert "Revert "roles/common: Use static imports for tasks"" 
This reverts commit 63c5477f85.

I'm actually still seeing this problem on Ansible 2.4.0.0 with Python
2.7.14.
 2017-11-05 01:51:49 +02:00
Alan Orth 36d6360eeb
roles/common: Fix error in conditional 2017-11-05 01:41:38 +02:00
Alan Orth fec081d40a
roles/common: Use deb.debian.org instead of httpredir 
Seems to be the evolution of httpredir.
 2017-11-05 01:31:16 +02:00
Alan Orth d15c9851db
roles/nginx: Use https for apt repository 2017-11-05 01:30:49 +02:00
Alan Orth 55b464e8f7
roles/common: Add apt-transport-https to base packages 
Allows fetching debian repositories over HTTPS.
 2017-11-05 01:29:00 +02:00
Alan Orth 1882ba612f
roles/munin: Remove ansible_os_family checks 
We only run Debian family distributions now so there is no need to check
this case.
 2017-11-05 01:20:20 +02:00
Alan Orth 547d808aea
roles/common: Remove ansible_os_family checks 
We're only supporting Debian family now so there's no point to check
this variable now.
 2017-11-05 01:19:28 +02:00
Alan Orth e43d8924e8
roles/munin: Remove ansible_os_family checks 
First of all, there is no ansible_os_family Ubuntu! Second, we are only
supporting Debian-based systems here so there is no need to check this.
 2017-11-05 01:17:01 +02:00
Alan Orth 5f8820bf9f
roles/common: Remove Ubuntu 14.04 logic 
We're only supporting Ubuntu 16.04 now.
 2017-11-05 01:11:37 +02:00
Alan Orth 7fd6127d29
roles/common: Remove check for CentOS in sshd task 
I'm not supporting CentOS here so we don't need to check this.
 2017-11-05 01:01:37 +02:00
Alan Orth f76fc64afa
roles/common: Remove unused sshd_config templates 
We're not supporting Ubuntu 14.04 or 15.04 anymore so we don't need
these templates.
 2017-11-05 00:59:19 +02:00
Alan Orth 77a3b1cff7
roles/common: Remove Debian 8 sshd_config template 2017-11-05 00:58:03 +02:00
Alan Orth b0524d2a2e
Remove references to Debian 8 
I don't need or want to support Debian 8 anymore so I can remove all
references to it in comments and code.
 2017-11-05 00:54:53 +02:00
Alan Orth b87f2e2fb0
roles/common: Use command module instead of shell 
You should only use the "shell" module when you need shell functions
like flow control and redirects. Also, the "command" module is safer
because it is not affected by the user's environment.
 2017-11-05 00:49:03 +02:00
Alan Orth 58598f470c
roles/mariadb: Remove start/enable task 
After installation the mariadb service is started and enabled, so we
don't need to do that explicitly.
 2017-11-05 00:28:07 +02:00
Alan Orth 9b4f662bc5 roles/nginx: Use systemd module instead of service 2017-11-05 00:27:44 +02:00
Alan Orth 2d6819986f roles/munin: Use systemd module instead of service 2017-11-05 00:27:44 +02:00
Alan Orth 0d694d44c8 roles/php-fpm: Update comment about Debian 9 2017-11-05 00:27:44 +02:00
Alan Orth 51183617b8 roles/php-fpm: Reload service instead of restarting 
No need to bounce the service for most config changes when we can just
tell the daemon to reload gracefully.
 2017-11-05 00:27:44 +02:00
Alan Orth 2a230ceff4 roles/php-fpm: Use systemd module instead of service 2017-11-05 00:27:44 +02:00
Alan Orth 7aafa1553b roles/mariadb: Use systemd module instead of service 2017-11-05 00:27:44 +02:00
Alan Orth b6a54ca4d1 roles/common: Reload firewalld instead of restart 
There is no need to bounce the service, just reload it.
 2017-11-05 00:27:44 +02:00
Alan Orth 0a92f3ae8f roles/common: Use systemd module instead of "service" 
This was new in Ansible 2.2 but I didn't notice until now. All of our
servers are running distributions with systemd so let's just use this.
 2017-11-05 00:27:44 +02:00
Alan Orth 0e409792ca
roles/mariadb: Update comment with link to MySQL module docs 2017-11-05 00:26:32 +02:00
Alan Orth 7b60e6d24f
Revert "Import OS-specific vars in tasks instead of play" 
This reverts commit e30e4d4b1e.

I suspect this was a side effect of using Python 3 rather than an
issue in Ansible 2.4.0.0.
 2017-11-04 23:53:38 +02:00
Alan Orth 63c5477f85
Revert "roles/common: Use static imports for tasks" 
This reverts commit 5147f4029b.

I think this was a side effect of using Python 3, not a regression in
Ansible 2.4.0.0.
 2017-11-04 23:53:25 +02:00