79 lines
3.0 KiB
YAML
79 lines
3.0 KiB
YAML
- hosts: test
|
|
vars:
|
|
ansible_user: vagrant
|
|
ansible_password: vagrant
|
|
management_user_list:
|
|
- name: admin
|
|
shell: '/bin/bash'
|
|
authorized_keys:
|
|
- key: "ssh-rsa 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 stephane"
|
|
exclusive: yes
|
|
sudo:
|
|
hosts: ALL
|
|
as: ALL
|
|
commands: ALL
|
|
nopasswd: ALL
|
|
netbird_setup_key: 26659E99-DED1-4ED4-B2D0-C0CC1246EFAE
|
|
netbird_register: true
|
|
node_exporter_tls_server_config:
|
|
cert_file: /etc/node_exporter/tls.cert
|
|
key_file: /etc/node_exporter/tls.key
|
|
node_exporter_basic_auth_users:
|
|
randomuser: examplepassword
|
|
node_exporter_web_listen_address: 192.168.0.20:9100
|
|
become: true
|
|
gather_facts: true
|
|
|
|
pre_tasks:
|
|
|
|
- name: Create node_exporter cert dir
|
|
file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
loop:
|
|
- /etc/node_exporter
|
|
|
|
- name: Generate an OpenSSL private key with the default values (4096 bits, RSA) and a passphrase
|
|
community.crypto.openssl_privatekey:
|
|
path: /etc/node_exporter/tls.key
|
|
mode: 0644
|
|
|
|
# /etc/node_exporter# chmod 644 tls.key
|
|
|
|
- name: Generate an OpenSSL Certificate Signing Request with a passphrase protected private key
|
|
community.crypto.openssl_csr:
|
|
path: /etc/node_exporter/tls.csr
|
|
privatekey_path: /etc/node_exporter/tls.key
|
|
common_name: www.ansible.com
|
|
|
|
- name: Generate a Self Signed OpenSSL certificate
|
|
community.crypto.x509_certificate:
|
|
path: /etc/node_exporter/tls.cert
|
|
privatekey_path: /etc/node_exporter/tls.key
|
|
csr_path: /etc/node_exporter/tls.csr
|
|
provider: selfsigned
|
|
|
|
# export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES ---> ERROR! A worker was found in a dead state
|
|
|
|
# chmod go+r /usr/share/keyrings/netbird-archive-keyring.gpg for error:
|
|
#||-----> GPG error: https://pkgs.netbird.io/debian stable InRelease: The following signatures couldn't be verified because the public key is not available
|
|
|
|
roles:
|
|
# - robertdebock.update
|
|
# - devsec.hardening.os_hardening
|
|
# - devsec.hardening.ssh_hardening
|
|
# - maxlareo.rkhunter
|
|
# - maxlareo.chkrootkit
|
|
# - robertdebock.auditd
|
|
# - geerlingguy.firewall
|
|
# - grog.management-user
|
|
# - GROG.user
|
|
# - GROG.authorized-key
|
|
# - GROG.sudo
|
|
# - ansible_unattended_upgrades
|
|
# - dominion_solutions.netbird.netbird
|
|
# - buluma.lynis
|
|
- prometheus.prometheus.node_exporter
|
|
# https://galaxy.ansible.com/ui/repo/published/prometheus/prometheus/content/role/node_exporter/ |