Files
@ 61e6cfb81789
Branch filter:
Location: majic-ansible-roles/roles/xmpp_server/tasks/main.yml - annotation
61e6cfb81789
2.1 KiB
text/x-yaml
MAR-51: Fixed documentation for ansible_key parameter in preseed role. Updated ca_certificates parameter in common role to accept key-value pairs of filenames and certificates to put on remote host (so lookups/inventory can be utilised in more flexible manner). Updated backup_client role to fail if it is not possible to extract encryption key IDs from deployed keys. Moved purging of Exim4 configuration files from handlers to tasks (more robust, and still idempotent). All documentation has been updated as well.
2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e b0e7faa211ae b0e7faa211ae b0e7faa211ae b0e7faa211ae 2e1ff733350e 0ad9410c243a 0ad9410c243a 0ad9410c243a 0ad9410c243a 0ad9410c243a 0ad9410c243a 284ed92d40bb 284ed92d40bb 284ed92d40bb 96e9f230a669 1b76d272e529 96e9f230a669 0ad9410c243a 0ad9410c243a 96e9f230a669 96e9f230a669 1b76d272e529 96e9f230a669 0ad9410c243a 0ad9410c243a 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e 2e1ff733350e a561d73e3242 a561d73e3242 a561d73e3242 a561d73e3242 a561d73e3242 2e1ff733350e a561d73e3242 eb9a1b525c77 eb9a1b525c77 eb9a1b525c77 eb9a1b525c77 dbc3381e1ff3 | ---
- name: Install Python apt bindings
apt: name=python-apt
- name: Add Prosody repository apt key
apt_key:
data: "{{ lookup('file', 'prosody-debian-packages.gpg') }}"
state: present
- name: Add Prosody repository
apt_repository: repo="deb http://packages.prosody.im/debian jessie main" state=present
- name: Install Lua Sec library (needed for TLS)
apt: name=lua-sec state=installed
- name: Install Lua LDAP library
apt: name=lua-ldap state=installed
- name: Install Prosody
apt: name=prosody state=installed
- name: Allow Prosody user to traverse the directory with TLS private keys
user: name=prosody append=yes groups=ssl-cert
- name: Deploy XMPP TLS private key
copy: dest="/etc/ssl/private/{{ xmpp_tls_key | basename }}" src="{{ xmpp_tls_key }}"
mode=640 owner=root group=prosody
notify:
- Restart Prosody
- name: Deploy XMPP TLS certificate
copy: dest="/etc/ssl/certs/{{ xmpp_tls_certificate | basename }}" src="{{ xmpp_tls_certificate }}"
mode=644 owner=root group=root
notify:
- Restart Prosody
- name: Set-up directory for storing additional Prosody modules
file: path=/usr/local/lib/prosody/modules/ state=directory mode=755 owner=root group=root
- name: Deploy the Prosody mod_auth_ldap module
get_url: url=https://prosody-modules.googlecode.com/hg/mod_auth_ldap/mod_auth_ldap.lua
dest=/usr/local/lib/prosody/modules/mod_auth_ldap.lua
- name: Set-up file permissions for the Prosody mod_auth_ldap module
file: dest=/usr/local/lib/prosody/modules/mod_auth_ldap.lua owner=root group=root mode=644
- name: Deploy Prosody configuration file
template: src=prosody.cfg.lua.j2 dest=/etc/prosody/prosody.cfg.lua
notify:
- Restart Prosody
- name: Enable Prosody service on boot (workaround for systemctl broken handling of SysV)
command: rcconf -on prosody
register: result
changed_when: result.stderr == ""
- name: Enable and start Prosody service
service: name=prosody state=started
- name: Deploy firewall configuration for XMPP server
copy: src="ferm_xmpp.conf" dest="/etc/ferm/conf.d/30-xmpp.conf" owner=root group=root mode=640
notify:
- Restart ferm
|