45 lines
979 B
YAML
Executable File
45 lines
979 B
YAML
Executable File
---
|
|
- name: Create account for backup services
|
|
ansible.builtin.user:
|
|
name: "{{ item }}"
|
|
password: "{{ password }}"
|
|
shell: /bin/bash
|
|
loop: "{{ services }}"
|
|
|
|
- name: Create backup directory tree
|
|
ansible.builtin.file:
|
|
path: "/backups/{{ item }}"
|
|
state: directory
|
|
owner: "{{ item }}"
|
|
group: "{{ item }}"
|
|
loop: "{{ services }}"
|
|
|
|
- name: Install NFS, SFTP and TFTP services
|
|
ansible.builtin.apt:
|
|
name: "{{ item }}"
|
|
state: present
|
|
loop:
|
|
- nfs-kernel-server
|
|
- openssh-server
|
|
- tftpd-hpa
|
|
|
|
- name: Configure SFTP for ISE backups
|
|
ansible.builtin.template:
|
|
src: sftp.conf.j2
|
|
dest: /etc/ssh/sshd_config
|
|
vars:
|
|
user: "ise"
|
|
|
|
- name: Fix permissions for SFTP folder
|
|
ansible.builtin.file:
|
|
path: "/backups/{{ user }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
vars:
|
|
user: "ise"
|
|
|
|
- name: Restart SSH service (allows SFTP changes to work)
|
|
ansible.builtin.service:
|
|
name: ssh
|
|
state: restarted |