mirror of
https://github.com/iiab/iiab.git
synced 2025-02-12 11:12:06 +00:00
93 lines
3.9 KiB
YAML
93 lines
3.9 KiB
YAML
- name: Record (initial) disk space used
|
|
shell: df -B1 --output=used / | tail -1
|
|
register: df1
|
|
|
|
|
|
- name: Stop & Disable '{{ apache_service }}' systemd service, in case it exists
|
|
systemd:
|
|
name: "{{ apache_service }}" # apache2 or httpd, per /opt/iiab/iiab/vars/<OS>.yml
|
|
state: stopped
|
|
enabled: no
|
|
ignore_errors: yes
|
|
# 'when: apache_installed is defined' insuff b/c mysql's php (etc) can install apache2
|
|
|
|
- name: 'Install 5 packages for NGINX: libnginx-mod-http-subs-filter, nginx-extras, php{{ php_version }}-fpm, uwsgi, uwsgi-plugin-python3'
|
|
package:
|
|
name:
|
|
- libnginx-mod-http-subs-filter
|
|
- nginx-extras
|
|
- php{{ php_version }}-fpm # INSTALLS [0] /etc/apache2/conf-available/php{{ php_version }}-fpm.conf AND DRAGS IN [1] php{{ php_version }}-cli (superset of php{{ php_version }}-common) [2] libsodium23 (likewise installed in moodle/tasks/install.yml AND wordpress/tasks/install.yml) [3] php{{ php_version }}-json if PHP < 8.0 (NEEDED FOR nextcloud/tasks/install.yml AND pbx/tasks/freepbx_dependencies.yml AND wordpress/tasks/install.yml)
|
|
- uwsgi # Admin Console & roles/captiveportal should really install
|
|
- uwsgi-plugin-python3 # these 2 packages on demand (not every IIAB needs these).
|
|
state: present
|
|
|
|
|
|
# 2021-08-07: Legacy from roles/httpd/tasks/install.yml
|
|
|
|
# - name: 'Create group: admin'
|
|
# group:
|
|
# name: admin
|
|
|
|
# 2020-10-16: Removed per #2560
|
|
# - name: Add user '{{ apache_user }}' to shadow group, so it can authenticate Admin Console
|
|
# user:
|
|
# name: "{{ apache_user }}" # www-data or apache, per /opt/iiab/iiab/vars/<OS>.yml
|
|
# groups: shadow
|
|
|
|
# - name: Add user {{ apache_user }} (from variable apache_user) to groups admin, shadow
|
|
# user:
|
|
# name: "{{ apache_user }}" # www-data on Debuntu
|
|
# #groups: admin,shadow
|
|
# groups: shadow # 2020-06-04: shadow nec for Admin Console login (this line had been clobbering user www-data's membership in group shadow, as set earlier by nginx/tasks/install.yml, SEE #2431)
|
|
# createhome: no
|
|
# append: yes
|
|
|
|
|
|
- name: Remove NGINX default config /etc/nginx/sites-enabled/default
|
|
file:
|
|
path: /etc/nginx/sites-enabled/default
|
|
state: absent
|
|
|
|
- name: 'Install 3 (of 5) files from template: /etc/nginx/server.conf, /etc/nginx/nginx.conf, /etc/nginx/mime.types'
|
|
template:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
with_items:
|
|
- { src: 'server.conf.j2', dest: '/etc/nginx/server.conf' }
|
|
- { src: 'nginx.conf.j2', dest: '/etc/nginx/nginx.conf' }
|
|
- { src: 'mime.types.j2', dest: '/etc/nginx/mime.types' }
|
|
# - { src: 'ports.conf', dest: '/etc/{{ apache_service }}/ports.conf' } # 2021-08-09: Restored from enable-or-disable.yml then moved to roles/pbx/tasks/apache.yml
|
|
# - { src: 'iiab.conf.j2', dest: "{{ nginx_conf_dir }}/iiab.conf" } # Moved into homepage.yml, invoked later by roles/www_options/tasks/main.yml (see below!)
|
|
|
|
- debug:
|
|
msg: roles/nginx/tasks/homepage.yml will run LATER (invoked by roles/www_options/tasks/main.yml) SO THAT NGINX CAN REDIRECT http://box TO http://box{{ iiab_home_url }} (based on var iiab_home_url)
|
|
# - include_tasks: roles/nginx/tasks/homepage.yml
|
|
|
|
- name: Restart php{{ php_version }}-fpm systemd service
|
|
systemd:
|
|
name: "php{{ php_version }}-fpm"
|
|
state: restarted
|
|
|
|
|
|
# RECORD NGINX AS INSTALLED
|
|
|
|
- name: Record (final) disk space used
|
|
shell: df -B1 --output=used / | tail -1
|
|
register: df2
|
|
|
|
- name: Add 'nginx_disk_usage = {{ df2.stdout|int - df1.stdout|int }}' to {{ iiab_ini_file }}
|
|
ini_file:
|
|
path: "{{ iiab_ini_file }}" # /etc/iiab/iiab.ini
|
|
section: nginx
|
|
option: nginx_disk_usage
|
|
value: "{{ df2.stdout|int - df1.stdout|int }}"
|
|
|
|
- name: "Set 'nginx_installed: True'"
|
|
set_fact:
|
|
nginx_installed: True
|
|
|
|
- name: "Add 'nginx_installed: True' to {{ iiab_state_file }}"
|
|
lineinfile:
|
|
path: "{{ iiab_state_file }}" # /etc/iiab/iiab_state.yml
|
|
regexp: '^nginx_installed'
|
|
line: 'nginx_installed: True'
|