majic-ansible-roles Files · roles/common/handlers/main.yml

Files @ 5bc6b7fb4cb5

Branch filter:

Location: majic-ansible-roles/roles/common/handlers/main.yml

5bc6b7fb4cb5 1.4 KiB text/x-yaml Show Annotation Show as Raw Download as Raw

branko

MAR-127: Implemented time synchronisation set-up in common role:

- Added new parameter ntp_servers for defining list of servers to use.
- Deploy ntp and ntpdate packages and relevant configuration files.
- Updated tests, fixing expected restriction lines in ntp
configuration, and adding an additional test to make sure the ntp
daemon has reread its configuration.

---

- name: Update PAM configuration
  command: "/usr/sbin/pam-auth-update --package"
  tags:
    # [ANSIBLE0012] Commands should not change things if nothing needs doing
    #   This task is invoked only if user is very specific about requiring to
    #   run the handlers manually as a way to bring the system to consistency
    #   after interrupted runs.
    - skip_ansible_lint

- name: Restart SSH
  service:
    name: ssh
    state: restarted

- name: Update CA certificate cache
  command: "/usr/sbin/update-ca-certificates --fresh"
  tags:
    # [ANSIBLE0012] Commands should not change things if nothing needs doing
    #   This task is invoked only if user is very specific about requiring to
    #   run the handlers manually as a way to bring the system to consistency
    #   after interrupted runs.
    - skip_ansible_lint

- name: Restart ferm
  service:
    name: ferm
    state: restarted

# @TODO: Replace this with use of systemd module once Ansible is upgraded to
# version 2.2+.
- name: Reload systemd
  command: "systemctl daemon-reload"
  tags:
    # [ANSIBLE0012] Commands should not change things if nothing needs doing
    #   This task is invoked only if user is very specific about requiring to
    #   run the handlers manually as a way to bring the system to consistency
    #   after interrupted runs.
    - skip_ansible_lint

- name: Restart NTP server
  service:
    name: ntp
    state: restarted