|
|
@@ -0,0 +1,73 @@
|
|
|
+---
|
|
|
+- name: make sure required software is installed
|
|
|
+ hosts: serverd.lab.example.com
|
|
|
+ become: yes
|
|
|
+ gather_facts: no
|
|
|
+ tasks:
|
|
|
+ - name: ensure the software is there
|
|
|
+ yum:
|
|
|
+ name: httpd
|
|
|
+ state: latest
|
|
|
+
|
|
|
+ - name: ensure that server admin is correctly set
|
|
|
+ lineinfile:
|
|
|
+ path: /etc/httpd/conf/httpd.conf
|
|
|
+ regexp: '^\s*ServerAdmin\s'
|
|
|
+ line: ServerAdmin webmaster@example.com
|
|
|
+ notify: them handlerz
|
|
|
+
|
|
|
+ - name: ensure that server is configured for port 80
|
|
|
+ lineinfile:
|
|
|
+ path: /etc/httpd/conf/httpd.conf
|
|
|
+ regexp: '^\s*Listen\s'
|
|
|
+ line: Listen 80
|
|
|
+ notify: them handlerz
|
|
|
+
|
|
|
+ - name: ensure we have a starting block delimiter
|
|
|
+ lineinfile:
|
|
|
+ path: /etc/httpd/conf/httpd.conf
|
|
|
+ insertbefore: '^<Directory "/var/www/html">'
|
|
|
+ line: "# **** THIS BLOCK IS MANAGED BY ANSIBLE. ANY CHANGES WILL BE REVERTED. ****"
|
|
|
+
|
|
|
+ - name: ensure default webroot permissions are sane
|
|
|
+ blockinfile:
|
|
|
+ path: /etc/httpd/conf/httpd.conf
|
|
|
+ marker: "{mark}"
|
|
|
+ marker_begin: "# **** THIS BLOCK IS MANAGED BY ANSIBLE. ANY CHANGES WILL BE REVERTED. ****"
|
|
|
+ marker_end: "</Directory>"
|
|
|
+ block: |
|
|
|
+ <Directory "/var/www/html">
|
|
|
+ Options FollowSymLinks
|
|
|
+ DirectoryIndex index.html
|
|
|
+ AllowOverride none
|
|
|
+ Require all granted
|
|
|
+ notify: them handlerz
|
|
|
+
|
|
|
+ - name: ensure the service is started and enabled to start automatically
|
|
|
+ service:
|
|
|
+ name: httpd
|
|
|
+ state: started
|
|
|
+ enabled: yes
|
|
|
+
|
|
|
+ - name: ensure firewall is open for the service
|
|
|
+ firewalld:
|
|
|
+ service: http
|
|
|
+ state: enabled
|
|
|
+ immediate: yes
|
|
|
+ permanent: yes
|
|
|
+
|
|
|
+ handlers:
|
|
|
+ - name: test configuration validity
|
|
|
+ listen: them handlerz
|
|
|
+ command:
|
|
|
+ cmd: apachectl configtest
|
|
|
+ creates: /tmp/was-here-already
|
|
|
+ chdir: /tmp
|
|
|
+ changed_when: false
|
|
|
+
|
|
|
+ - name: restart the service
|
|
|
+ listen: them handlerz
|
|
|
+ service:
|
|
|
+ name: httpd
|
|
|
+ state: restarted
|
|
|
+
|
