130 lines
3 KiB
YAML
130 lines
3 KiB
YAML
---
|
|
- name: remove old config files
|
|
ansible.builtin.file:
|
|
path: /etc/icinga2/conf.d/apt.conf
|
|
state: absent
|
|
notify: reload icinga2
|
|
tags: icinga2
|
|
|
|
- name: copy scripts
|
|
ansible.builtin.copy:
|
|
content: '{{ item.value }}'
|
|
dest: '/etc/icinga2/scripts/{{ item.key }}'
|
|
owner: root
|
|
group: nagios
|
|
mode: 0750
|
|
loop: '{{ icinga2_scripts | dict2items }}'
|
|
loop_control:
|
|
label: '{{ item.key }}'
|
|
tags: icinga2
|
|
|
|
- name: copy config files
|
|
ansible.builtin.template:
|
|
src: '{{ item }}.conf.j2'
|
|
dest: '/etc/icinga2/conf.d/{{ item }}.conf'
|
|
owner: root
|
|
group: nagios
|
|
mode: 0640
|
|
loop:
|
|
- check_commands
|
|
- commands
|
|
- dependencies
|
|
- groups
|
|
- hosts
|
|
- notifications
|
|
- services
|
|
- templates
|
|
- timeperiods
|
|
- users
|
|
notify: reload icinga2
|
|
tags: icinga2
|
|
|
|
- name: copy zones config files
|
|
ansible.builtin.template:
|
|
src: zones.conf.j2
|
|
dest: /etc/icinga2/zones.conf
|
|
owner: root
|
|
group: nagios
|
|
mode: 0640
|
|
notify: reload icinga2
|
|
tags: icinga2
|
|
|
|
- name: copy ido config file
|
|
ansible.builtin.template:
|
|
src: ido-db.conf.j2
|
|
dest: /etc/icinga2/conf.d/ido-db.conf
|
|
owner: root
|
|
group: nagios
|
|
mode: 0640
|
|
notify: restart icinga2
|
|
tags: icinga2
|
|
|
|
- name: copy api SSL key
|
|
ansible.builtin.copy:
|
|
content: '{{ icinga2_api_ssl_node_key }}'
|
|
dest: '/var/lib/icinga2/certs/{{ inventory_hostname }}.key'
|
|
owner: root
|
|
group: nagios
|
|
mode: 0640
|
|
when: '"api" in icinga2_features'
|
|
notify: restart icinga2
|
|
tags: icinga2
|
|
|
|
- name: copy api SSL certificate
|
|
ansible.builtin.copy:
|
|
content: '{{ icinga2_api_ssl_node_crt }}'
|
|
dest: '/var/lib/icinga2/certs/{{ inventory_hostname }}.crt'
|
|
owner: root
|
|
group: nagios
|
|
mode: 0640
|
|
when: '"api" in icinga2_features'
|
|
notify: restart icinga2
|
|
tags: icinga2
|
|
|
|
- name: copy api SSL ca certifiacte
|
|
ansible.builtin.copy:
|
|
content: '{{ icinga2_api_ssl_ca_crt }}'
|
|
dest: '{{ item }}/ca.crt'
|
|
owner: root
|
|
group: nagios
|
|
mode: 0640
|
|
when: '"api" in icinga2_features'
|
|
loop:
|
|
- /var/lib/icinga2/certs
|
|
- /etc/icinga2/pki
|
|
notify: restart icinga2
|
|
tags: icinga2
|
|
|
|
- name: copy api SSL ca key
|
|
ansible.builtin.copy:
|
|
content: '{{ icinga2_api_ssl_ca_key }}'
|
|
dest: /etc/icinga2/pki/ca.key
|
|
owner: root
|
|
group: nagios
|
|
mode: 0640
|
|
when: '"api" in icinga2_features and icinga2_master'
|
|
notify: restart icinga2
|
|
tags: icinga2
|
|
|
|
- name: copy feature config files
|
|
ansible.builtin.template:
|
|
src: feature.conf.j2
|
|
dest: '/etc/icinga2/features-available/{{ item.key }}.conf'
|
|
owner: root
|
|
group: nagios
|
|
mode: 0640
|
|
loop: '{{ icinga2_features | dict2items }}'
|
|
loop_control:
|
|
label: '{{ item.key }}'
|
|
notify: restart icinga2
|
|
tags: icinga2
|
|
|
|
- name: manage features
|
|
community.general.icinga2_feature:
|
|
name: '{{ item.key }}'
|
|
state: '{{ item.state | default("present") }}'
|
|
loop: '{{ icinga2_features | dict2items }}'
|
|
loop_control:
|
|
label: '{{ item.key }}'
|
|
notify: restart icinga2
|
|
tags: icinga2
|