diff --git a/ansible/setup.yml b/ansible/setup.yml index 95ef768f..ba75014f 100755 --- a/ansible/setup.yml +++ b/ansible/setup.yml @@ -1,111 +1,116 @@ #!/usr/bin/ansible-playbook - name: Setup kolab deployment on fedora server hosts: "{{ hostname }}" remote_user: root tasks: - import_tasks: grub.yml - name: Set hostname ansible.builtin.hostname: name: "{{ hostname }}" - import_tasks: packages.yml + - name: Put SELinux in permissive mode for docker + ansible.posix.selinux: + policy: targeted + state: permissive + - name: Setup user kolab ansible.builtin.user: name: kolab shell: /bin/bash groups: wheel, audio, docker append: yes - name: sudo without password ansible.builtin.lineinfile: path: /etc/sudoers state: present regexp: '^%wheel\s' line: '%wheel ALL=(ALL) NOPASSWD: ALL' - name: Start service docker, if not started ansible.builtin.service: name: docker state: started - import_tasks: certbot.yml - name: get kolab git repo become: true become_user: kolab git: repo: https://git.kolab.org/source/kolab.git dest: /home/kolab/kolab version: "{{ git_branch }}" force: yes - name: "kolab env.local" vars: host: "{{ hostname }}" openexchangerates_api_key: "{{ openexchangerates_api_key }}" firebase_api_key: "{{ firebase_api_key }}" public_ip: "{{ public_ip }}" ansible.builtin.template: src: env.local dest: /home/kolab/kolab/src/env.local owner: kolab group: kolab mode: '0766' - name: Permit receiving mail firewalld: port: 25/tcp permanent: yes state: enabled zone: FedoraServer - name: Permit http traffic firewalld: port: 80/tcp permanent: yes state: enabled zone: FedoraServer - name: Permit https traffic firewalld: port: 443/tcp permanent: yes state: enabled zone: FedoraServer - name: Permit TCP trafic for coturn firewalld: port: 3478/tcp permanent: yes state: enabled zone: FedoraServer - name: Permit TCP trafic for coturn firewalld: port: 5349/tcp permanent: yes state: enabled zone: FedoraServer - name: Permit UDP trafic for coturn firewalld: port: 3478/udp permanent: yes state: enabled zone: FedoraServer - name: Permit UDP trafic for coturn firewalld: port: 5349/udp permanent: yes state: enabled zone: FedoraServer - name: Run bin/deploy become: true become_user: kolab ansible.builtin.command: bin/deploy.sh args: chdir: /home/kolab/kolab