mirror of
https://github.com/iiab/iiab.git
synced 2025-02-12 19:22:24 +00:00
network guard against faulty user edits to local_vars
This commit is contained in:
parent
36defde4ae
commit
2423d9a293
4 changed files with 15 additions and 8 deletions
|
@ -2,7 +2,7 @@
|
||||||
service:
|
service:
|
||||||
name: dhcpd
|
name: dhcpd
|
||||||
enabled: no
|
enabled: no
|
||||||
when: dhcpd_install and not dhcpd_enabled
|
when: (dhcpd_install or dhcpd_installed is defined) and not dhcpd_enabled
|
||||||
|
|
||||||
# service is restarted with NM dispatcher.d script
|
# service is restarted with NM dispatcher.d script
|
||||||
- name: Enable dhcpd service
|
- name: Enable dhcpd service
|
||||||
|
@ -46,7 +46,7 @@
|
||||||
systemd:
|
systemd:
|
||||||
name: "{{ dns_service }}"
|
name: "{{ dns_service }}"
|
||||||
enabled: no
|
enabled: no
|
||||||
when: named_install and not named_enabled
|
when: (named_install or named_installed is defined) and not named_enabled
|
||||||
|
|
||||||
- name: Install /etc/dnsmasq.d/iiab.conf from template, when dnsmasq_enabled and isn't Appliance
|
- name: Install /etc/dnsmasq.d/iiab.conf from template, when dnsmasq_enabled and isn't Appliance
|
||||||
template:
|
template:
|
||||||
|
@ -122,7 +122,7 @@
|
||||||
systemd:
|
systemd:
|
||||||
name: dansguardian
|
name: dansguardian
|
||||||
enabled: no
|
enabled: no
|
||||||
when: dansguardian_install and not dansguardian_enabled
|
when: (dansguardian_install or dansguardian_installed is defined) and not dansguardian_enabled
|
||||||
|
|
||||||
- name: Mandate 'HTTPCACHE_ON=True' in {{ iiab_env_file }}, if squid_enabled
|
- name: Mandate 'HTTPCACHE_ON=True' in {{ iiab_env_file }}, if squid_enabled
|
||||||
lineinfile:
|
lineinfile:
|
||||||
|
@ -164,7 +164,7 @@
|
||||||
systemd:
|
systemd:
|
||||||
name: "{{ proxy }}"
|
name: "{{ proxy }}"
|
||||||
enabled: no
|
enabled: no
|
||||||
when: squid_install and not squid_enabled
|
when: (squid_install or squid_installed is defined) and not squid_enabled
|
||||||
|
|
||||||
- name: Revert to 'HTTPCACHE_ON=False' if not squid_enabled
|
- name: Revert to 'HTTPCACHE_ON=False' if not squid_enabled
|
||||||
lineinfile:
|
lineinfile:
|
||||||
|
@ -184,7 +184,7 @@
|
||||||
systemd:
|
systemd:
|
||||||
name: wondershaper
|
name: wondershaper
|
||||||
enabled: no
|
enabled: no
|
||||||
when: wondershaper_install and not wondershaper_enabled
|
when: (wondershaper_install or wondershaper_installed is defined) and not wondershaper_enabled
|
||||||
|
|
||||||
# check-LAN should be iptables.yml remove later
|
# check-LAN should be iptables.yml remove later
|
||||||
- name: Install clean copy of /usr/bin/iiab-gen-iptables from template
|
- name: Install clean copy of /usr/bin/iiab-gen-iptables from template
|
||||||
|
|
|
@ -57,7 +57,7 @@
|
||||||
|
|
||||||
- name: Configure wondershaper
|
- name: Configure wondershaper
|
||||||
include_tasks: wondershaper.yml
|
include_tasks: wondershaper.yml
|
||||||
when: wondershaper_install | bool
|
when: wondershaper_install | bool or wondershaper_installed is defined
|
||||||
tags:
|
tags:
|
||||||
- network
|
- network
|
||||||
- wondershaper
|
- wondershaper
|
||||||
|
|
|
@ -15,13 +15,13 @@
|
||||||
name: "{{ proxy }}"
|
name: "{{ proxy }}"
|
||||||
state: stopped
|
state: stopped
|
||||||
async: 120
|
async: 120
|
||||||
when: squid_install | bool
|
when: squid_install | bool or squid_installed is defined
|
||||||
|
|
||||||
- name: Stop DansGuardian
|
- name: Stop DansGuardian
|
||||||
systemd:
|
systemd:
|
||||||
name: dansguardian
|
name: dansguardian
|
||||||
state: stopped
|
state: stopped
|
||||||
when: dansguardian_install | bool
|
when: dansguardian_install | bool or dansguardian_installed is defined
|
||||||
|
|
||||||
- name: Restart DansGuardian service (dansguardian) except Ubuntu which needs reboot to activate
|
- name: Restart DansGuardian service (dansguardian) except Ubuntu which needs reboot to activate
|
||||||
systemd:
|
systemd:
|
||||||
|
|
|
@ -38,6 +38,13 @@
|
||||||
group: root
|
group: root
|
||||||
state: link
|
state: link
|
||||||
|
|
||||||
|
- name: Add 'wondershaper_installed' variable values to {{ iiab_installed }}
|
||||||
|
lineinfile:
|
||||||
|
dest: "{{ iiab_installed }}"
|
||||||
|
regexp: '^wondershaper_installed'
|
||||||
|
line: 'wondershaper_installed: True'
|
||||||
|
state: present
|
||||||
|
|
||||||
- name: Add 'wondershaper' variable values to {{ iiab_ini_file }}
|
- name: Add 'wondershaper' variable values to {{ iiab_ini_file }}
|
||||||
ini_file:
|
ini_file:
|
||||||
dest: "{{ iiab_ini_file }}"
|
dest: "{{ iiab_ini_file }}"
|
||||||
|
|
Loading…
Reference in a new issue