Almalinux validé

tasks/RedHat/install-db.yml

@@ -8,22 +8,17 @@
   tags:
     - install_db
 
-- name: Database - Check if postgrsql configured
+- name: Database - Check if postgresql is configured
   stat:
-    path: /var/lib/pgsql/data
+    path: /var/lib/pgsql/data/PG_VERSION
   register: postgresqldata
 
-- name: Database - debug
-  debug:
-    var: postgresqldata
-
 - name: Database - Init DB
   ansible.builtin.shell:
     cmd: postgresql-setup --initdb
   when:  postgresqldata.stat.exists == false
   tags:
     - install_db
-  
 
 - name: Database - Enable and start service postgresl
   ansible.builtin.service:
@@ -82,10 +77,19 @@
   service:
     name: postgresql
     state: restarted
+    enabled: true
   tags:
    - install_db
 
 - name: Populate zabbix database
   ansible.builtin.shell: 'zcat /usr/share/zabbix/sql-scripts/postgresql/server.sql.gz | psql -Uzabbix zabbix'
   tags:
-   - install_db
+   - install_db
+
+- name: Proxy - Enable and start service zabbix component
+  ansible.builtin.service:
+    name: "{{ item }}"
+    state: restarted
+    enabled: true
+  loop: 
+    - zabbix-agent2

tasks/RedHat/install-front.yml

@@ -27,10 +27,27 @@
     - Restart php-fpm
 
 - name: Front - Configure keepalived
-  ansible.builtin.template:
-    src: keepalived.conf.j2
-    dest: /etc/keepalived/keepalived.conf
-    owner: root
-    group: root
-    mode: 0644
-  notify: Restart Keepalived
+  when: role == "srv"
+  block:
+    - name: Configure Keepalived
+      ansible.builtin.template:
+        src: keepalived.conf.j2
+        dest: /etc/keepalived/keepalived.conf
+        owner: root
+        group: root
+        mode: 0644
+    - name: Enable Keepalived service
+      ansible.builtin.systemd_service:
+        name: keepalived
+        state: restarted
+        enabled: true
+
+- name: Enable and start
+  ansible.builtin.systemd_service:
+    name: "{{ item }}"
+    state: started
+    enabled: true
+  loop: 
+    - nginx
+    - php-fpm
+    - zabbix-agent2

tasks/RedHat/install-proxy.yml

@@ -0,0 +1,98 @@
+- name: Proxy - Install Debian Proxy packages
+  ansible.builtin.dnf:
+    name: "{{ item }}"
+    state: present
+  loop: "{{ proxy.packages }}"
+  tags:
+    - install_proxy
+    
+- name: Proxy - Enable and start service mariadb
+  ansible.builtin.service:
+    name: mariadb
+    state: started
+    enabled: yes
+  tags:
+    - install_proxy
+
+- name: Proxy - Generate mariadb proxy creation script
+  ansible.builtin.template:
+    src: create_proxy_db.j2
+    dest: /tmp/create_proxy_db.sql
+  tags:
+    - install_proxy
+
+- name: Proxy - Create mariadb proxy database
+  ansible.builtin.shell: mysql -uroot <  /tmp/create_proxy_db.sql
+  tags:
+   - install_proxy
+
+- name: Proxy - Populate mariadb proxy database
+  ansible.builtin.shell: 'cat /usr/share/zabbix/sql-scripts/mysql/proxy.sql | mysql --default-character-set=utf8mb4 -u{{proxy_db_user}} --password={{proxy_db_passwd}} {{proxy_db_name}}'
+  tags:
+   - install_proxy
+
+- name: Proxy - Enable and restart mariadb
+  ansible.builtin.systemd_service:
+    name: "{{ item }}"
+    state: started
+    enabled: true
+  loop: 
+    - mariadb
+
+- name: Find Group
+  set_fact:
+    my_group:  "{{ group_names | first }}"
+
+- name: Proxy - Génération la liste des servers
+  set_fact:
+    hotes_filtres: >-
+      {{ groups[my_group] |
+      map('extract', hostvars) |
+      selectattr('role', 'in', 'srv') |
+      map(attribute='inventory_hostname') |
+      list }}
+
+- name: Proxy - Set fact Server
+  set_fact:
+    Server: "{{ hotes_filtres | join(';') }}"
+
+- name: Proxy - Generate config
+  ansible.builtin.template:
+      src: zabbix_proxy.conf.j2
+      dest: /etc/zabbix/zabbix_proxy.conf
+      owner: root
+      group: zabbix
+      mode: 400
+      
+  tags:
+    - install_proxy
+    
+- name: Proxy - Create certificats directory
+  ansible.builtin.file:
+    path:  "/etc/zabbix/certs"
+    state: directory
+    recurse: yes
+    owner: zabbix
+    group: zabbix
+  when: zabbix_crypt=="tls"
+
+- name: Proxy - Copy certificats
+  ansible.builtin.copy:
+    src: "{{ item }}"
+    dest: "/etc/zabbix/certs/{{ item }}"
+    owner: zabbix
+    group: zabbix
+  loop:
+    - "{{ zabbix_ca}}.crt"
+    - "{{ zabbix_proxy}}.crt"
+    - "{{ zabbix_proxy}}.key"
+  when: zabbix_crypt=="tls"
+
+- name: Proxy - Enable and start service zabbix proxy
+  ansible.builtin.service:
+    name: "{{ item }}"
+    state: restarted
+    enabled: true
+  loop: 
+    - zabbix-proxy
+    - zabbix-agent2

tasks/RedHat/install-srv.yml

@@ -1,3 +1,4 @@
+# Server
 - name: Server - Install packages
   ansible.builtin.dnf:
     name: "{{ item }}"