server-config/roles/nethcfg/tasks/reconfig_srv.yml

111 lines
3.9 KiB
YAML
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

---
- name: Configurazione organizzazione
shell: /sbin/e-smith/db configuration setprop OrganizationContact City "{{ org_city }}" Company "{{ org_company }}" CountryCode {{ org_countrycode }} Department "{{ org_department }}" PhoneNumber "{{ org_phone }}" Street "{{ org_street }}"
sudo: yes
- name: Configurazione nome server
shell: /sbin/e-smith/db configuration set SystemName {{ server }}
sudo: yes
- name: Configurazione nome dominio
shell: /sbin/e-smith/db configuration set DomainName {{ domainfull }}
sudo: yes
- name: Attivazione cambiamenti hostname
shell: /sbin/e-smith/signal-event hostname-modify
sudo: yes
- name: Configurazione forza password
shell: /sbin/e-smith/db configuration setprop passwordstrength PassExpires no Users none
sudo: yes
- name: Attivo configurazione policy password
shell: /sbin/e-smith/signal-event password-policy-update
sudo: yes
- name: Configurazione servizio DHCP
shell: /sbin/e-smith/db dhcp set eth1 range DhcpRangeStart {{ dhcprange_start }} DhcpRangeEnd {{ dhcprange_end }} status enabled
sudo: yes
- name: Attivazione configurazione DHCP
shell: /sbin/e-smith/signal-event network-modify
sudo: yes
- name: Configurazione servizio DNS
shell: /sbin/e-smith/db configuration setprop dns role resolver NameServers "{{ extdnsserver1 }},{{ extdnsserver2 }}"
sudo: yes
register: cfg_dns
- name: Attivo configurazione DNS
shell: /sbin/e-smith/signal-event nethserver-dnsmasq-save
when: cfg_dns|changed
sudo: yes
- name: Configuro NTP
shell: /sbin/e-smith/db configuration setprop ntpd NTPServer ntp1.inrim.it status enabled
sudo: yes
- name: Attivazione NTP
shell: /sbin/e-smith/signal-event nethserver-ntp-update
sudo: yes
- name: Configurazione SMB
shell: /sbin/e-smith/db configuration setprop smb RoamingProfiles yes ServerRole PDC Workgroup "{{ domainshort }}" status enabled
sudo: yes
- name: Attivo configurazione SMB
shell: /sbin/e-smith/signal-event nethserver-samba-save
sudo: yes
- name: Creazione gruppo Domain Users
shell: /sbin/e-smith/db accounts set domusers group Description "Domain Users" Members admin Removable no
sudo: yes
- name: Configurazione nuovo gruppo Domain Users
shell: /sbin/e-smith/signal-event group-create domusers
sudo: yes
- name: Abilito il ricaricamento dei servizi smb su ibay-create
shell: test -L {{ item }}/smb || cd {{ item }} && ln -sf reload smb
with_items:
- /etc/e-smith/events/ibay-delete/services2adjust
- /etc/e-smith/events/ibay-create/services2adjust
- /etc/e-smith/events/ibay-modify/services2adjust
sudo: yes
- name: Configurazione share Condiviso
shell: /sbin/e-smith/db accounts set shared ibay AclRead domusers,domadmins AclWrite domusers,domadmins Description "Cartella condivisa" GroupAccess rw HttpStatus disabled OtherAccess r OwningGroup locals SmbAuditStatus enabled SmbGuestAccessType none SmbRecycleBinStatus enabled SmbRecycleBinVersionsStatus enabled SmbStatus enabled
sudo: yes
- name: Attivazione share condiviso
shell: /sbin/e-smith/signal-event ibay-create shared
sudo: yes
- name: Configurazione squid
shell: /sbin/e-smith/db configuration setprop squid BlueMode transparent GreenMode transparent PortBlock enabled status enabled DiskCache enabled DiskCacheSize 500
sudo: yes
- name: Attivazione configurazione squid
shell: /sbin/e-smith/signal-event nethserver-squid-update
sudo: yes
- name: Configurazione squidguard
shell: /sbin/e-smith/db configuration setprop squidguard Expressions enabled Lists shalla status enabled
sudo: yes
- name: Scarico liste di filtraggio
shell: /sbin/e-smith/signal-event nethserver-squidguard-downloadlists
sudo: yes
- name: Attivazione squidguard
shell: /sbin/e-smith/signal-event nethserver-squidguard-update
sudo: yes
- name: Configurazione squidclamav
shell: /sbin/e-smith/db configuration setprop squidclamav status enabled
sudo: yes
- name: Attivazione squidclamav
shell: /sbin/e-smith/signal-event nethserver-squidclamav-update
sudo: yes