Clément Désiles
b0324cf3fe
- nfs_server: nfs_package_name (nfs-utils / nfs-kernel-server) - wireguard: wireguard_package_name (wireguard-tools / wireguard) - tooling: tooling_dig_package, tooling_netcat_package Also fix tooling role structure: move tooling.yml to tasks/main.yml so the role is actually invokable via 'role: tooling' (defaults/main.yml is auto-loaded), and collapse the 10 individual package tasks into a single list-based install.
49 lines
1.2 KiB
YAML
49 lines
1.2 KiB
YAML
---
|
|
- name: Install nfs-server
|
|
ansible.builtin.package:
|
|
name: "{{ nfs_package_name }}"
|
|
state: present
|
|
|
|
- name: Configure nfs configuration
|
|
ansible.builtin.template:
|
|
src: templates/nfs.conf.j2
|
|
dest: "{{ nfs_configuration_file }}"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: Reload systemd and restart nfs-server
|
|
|
|
- name: Configure nfs-server exports
|
|
ansible.builtin.template:
|
|
src: templates/exports.j2
|
|
dest: "{{ nfs_exports_file }}"
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify: Update exportfs
|
|
|
|
- name: Systemd service for nfs-server is started and enabled
|
|
ansible.builtin.systemd:
|
|
name: nfsv4-server
|
|
state: started
|
|
enabled: true
|
|
|
|
- name: Mask nfs-server service to prevent conflicts with nfsv4-server
|
|
ansible.builtin.systemd:
|
|
name: nfs-server
|
|
masked: true
|
|
|
|
- name: Setup firewall rules for nfs on port
|
|
community.general.ufw:
|
|
rule: allow
|
|
src: "{{ item }}"
|
|
port: "{{ nfs_port }}"
|
|
proto: any
|
|
direction: in
|
|
comment: "Network File System (NFS)"
|
|
with_items: "{{ nfs_server_firewall_allowed_sources | default([]) }}"
|
|
retries: 5
|
|
delay: 2
|
|
register: ufw_result
|
|
until: ufw_result is succeeded
|