chris
81398e847e
- Updated all tasks to use fully qualified module names (e.g., ansible.builtin.shell, ansible.builtin.copy) for clarity and to avoid ambiguity. - Replaced deprecated 'yum' module with 'dnf' for package management on RedHat-based systems. - Improved formatting and consistency in task definitions, including the use of double quotes for strings and consistent indentation. - Removed unnecessary comments and whitespace to enhance readability. - Ensured that conditions and loops are consistently formatted across all tasks.
150 lines
3.9 KiB
YAML
150 lines
3.9 KiB
YAML
|
|
---
|
|
# ---
|
|
# Install 'bind' apt based OS
|
|
# ---
|
|
|
|
- name: (caching-nameserver.yml) update
|
|
ansible.builtin.apt:
|
|
update_cache: true
|
|
cache_valid_time: "{{ 0 if apt_config_updated is defined and apt_config_updated.changed else apt_update_cache_valid_time }}"
|
|
when:
|
|
- ansible_facts["distribution"] == "Debian"
|
|
- apt_update|bool
|
|
tags:
|
|
- apt-caching-nameserver
|
|
|
|
- name: (caching-nameserver.yml) Configure any half-installed packages 'dpkg --configure -a'
|
|
ansible.builtin.command: dpkg --configure -a
|
|
register: _dpkg_configure
|
|
changed_when: (_dpkg_configure.stdout | default('')) | length > 0
|
|
failed_when: _dpkg_configure.rc != 0
|
|
when:
|
|
- ansible_facts["distribution"] == "Debian"
|
|
- apt_update|bool
|
|
tags:
|
|
- apt-caching-nameserver
|
|
|
|
- name: (caching-nameserver.yml) upgrade
|
|
ansible.builtin.apt:
|
|
upgrade: "{{ apt_upgrade_type }}"
|
|
update_cache: true
|
|
dpkg_options: "{{ apt_upgrade_dpkg_options | join(',') }}"
|
|
when:
|
|
- ansible_facts["distribution"] == "Debian"
|
|
- apt_dpkg_configure|bool
|
|
tags:
|
|
- apt-caching-nameserver
|
|
|
|
- name: (caching-nameserver.yml) Install bind packages (using apt)
|
|
ansible.builtin.apt:
|
|
name: "{{ apt_bind_pkgs }}"
|
|
state: present
|
|
when:
|
|
- ansible_facts["distribution"] == "Debian"
|
|
- install_bind_packages|bool == true
|
|
tags:
|
|
- apt-caching-nameserver
|
|
|
|
# ---
|
|
# Install 'bind' - yum based OS
|
|
# ---
|
|
|
|
- name: (yum.yml) Install system updates for centos systems
|
|
ansible.builtin.dnf:
|
|
name: "*"
|
|
state: latest
|
|
update_cache: true
|
|
#cache_valid_time: 3600
|
|
when:
|
|
- ansible_facts.os_family == "RedHat"
|
|
- ansible_facts["distribution"] == "CentOS"
|
|
tags:
|
|
- yum-update
|
|
|
|
- name: (yum.yml) Install bind packages (using yum)
|
|
ansible.builtin.dnf:
|
|
name: "{{ yum_bind_pks }}"
|
|
state: "{{ yum_install_state }}"
|
|
when:
|
|
- ansible_facts.os_family == "RedHat"
|
|
- ansible_facts["distribution"] == "CentOS"
|
|
tags:
|
|
- yum-caching-nameserver
|
|
|
|
# ---
|
|
# Configure bind on debian systems
|
|
# --
|
|
|
|
- name: (caching-nameserver.yml) Create directory /var/log/named if it does not exist
|
|
ansible.builtin.file:
|
|
path: /var/log/named
|
|
state: directory
|
|
owner: bind
|
|
group: bind
|
|
mode: "0755"
|
|
when:
|
|
- ansible_facts["distribution"] == "Debian"
|
|
|
|
- name: (caching-nameserver.yml) update named.conf.options configuration file (normal server)
|
|
ansible.builtin.template:
|
|
src: etc/bind/named.conf.options.j2
|
|
dest: /etc/bind/named.conf.options
|
|
backup: true
|
|
owner: root
|
|
group: bind
|
|
mode: "0644"
|
|
#validate: visudo -cf %s
|
|
notify: Reload bind9
|
|
tags:
|
|
- apt-caching-nameserver
|
|
- caching-nameserver
|
|
when:
|
|
- ansible_facts["distribution"] == "Debian"
|
|
- inventory_hostname not in groups["gateway_server"]
|
|
|
|
# --------------------
|
|
|
|
# In case of gateway gateway servers ONLY if bind ption file NOT exists
|
|
#
|
|
- name: Check if file '/etc/bind/named.conf.options' exists
|
|
ansible.builtin.stat:
|
|
path: /etc/bind/named.conf.options
|
|
register: file_named_conf_options
|
|
|
|
- name: (caching-nameserver.yml) update named.conf.options configuration file (gateway server)
|
|
ansible.builtin.template:
|
|
src: etc/bind/named.conf.options.gateway.j2
|
|
dest: /etc/bind/named.conf.options
|
|
backup: true
|
|
owner: root
|
|
group: bind
|
|
mode: "0644"
|
|
#validate: visudo -cf %s
|
|
notify: Reload bind9
|
|
tags:
|
|
- apt-caching-nameserver
|
|
- caching-nameserver
|
|
when:
|
|
- ansible_facts["distribution"] == "Debian"
|
|
- inventory_hostname in groups["gateway_server"]
|
|
# - not file_named_conf_options.stat.exists
|
|
|
|
# --------------------
|
|
|
|
- name: (caching-nameserver.yml) Add 127.0.0.1 as first nameserver entry to /etc/resolv.conf
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/resolv.conf
|
|
line: nameserver 127.0.0.1
|
|
firstmatch: true
|
|
insertbefore: "^nameserver"
|
|
state: present
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
tags:
|
|
- apt-caching-nameserver
|
|
when:
|
|
- ansible_facts["distribution"] == "Debian"
|
|
- not systemd_resolved
|