mirror of
https://github.com/iiab/iiab.git
synced 2025-02-13 19:52:06 +00:00
67 lines
2.5 KiB
YAML
67 lines
2.5 KiB
YAML
# Passwords and license keys in /etc/iiab/local_vars.yml are not a healthy
|
|
# precedent :/ (Going forward let's try to keep credentials in their own apps)
|
|
|
|
- name: Copy OPTIONAL remoteit_license_key, e.g. from /etc/iiab/local_vars.yml to /etc/remoteit/registration, if remoteit_license_key is defined
|
|
# shell: echo {{ remoteit_license_key }} > /etc/remoteit/registration
|
|
template:
|
|
src: registration.j2
|
|
dest: /etc/remoteit/registration
|
|
when: remoteit_license_key is defined
|
|
|
|
- name: Redact OPTIONAL remoteit_license_key from /etc/iiab/local_vars.yml, if remoteit_license_key is defined
|
|
# shell: sed -i '/^remoteit_license_key:/d' {{ iiab_local_vars_file }}
|
|
lineinfile:
|
|
path: "{{ iiab_local_vars_file }}"
|
|
regexp: '^remoteit_license_key:.*'
|
|
state: absent
|
|
when: remoteit_license_key is defined
|
|
|
|
|
|
# 2022-04-07 FYI: connectd (below) never deletes /etc/remoteit/registration
|
|
|
|
- name: Enable & Restart remote.it "parent" service connectd, which exits after spawning 2 "child" services/daemons below
|
|
systemd:
|
|
name: connectd
|
|
daemon_reload: yes
|
|
enabled: yes
|
|
state: restarted
|
|
when: remoteit_enabled
|
|
|
|
- name: Enable remote.it daemon schannel ("Remote tcp command service") -- try to avoid contention with connectd which auto-spawns it as nec (just above)
|
|
systemd:
|
|
name: schannel
|
|
enabled: yes
|
|
state: started
|
|
when: remoteit_enabled
|
|
|
|
|
|
- name: Disable & Stop remote.it services {connectd, schannel}
|
|
systemd:
|
|
name: "{{ item }}"
|
|
enabled: no
|
|
state: stopped
|
|
with_items:
|
|
- connectd
|
|
- schannel
|
|
ignore_errors: yes
|
|
when: not remoteit_enabled
|
|
|
|
- name: Stop & Disable "Remote tcp connection services" remoteit@* found in /etc/systemd/system/multi-user.target.wants/ e.g. remoteit@80:00:01:7F:7E:00:56:36.service
|
|
shell: |
|
|
systemctl stop $(ls /etc/systemd/system/multi-user.target.wants/ | grep remoteit@*)
|
|
systemctl disable $(ls /etc/systemd/system/multi-user.target.wants/ | grep remoteit@*)
|
|
ignore_errors: yes
|
|
when: not remoteit_enabled
|
|
|
|
# - name: Identify remoteit "Remote tcp connection service" unit file name, including uuid, e.g. remoteit@80:00:01:7F:7E:00:56:36.service
|
|
# shell: ls /etc/systemd/system/multi-user.target.wants/ | grep remoteit@
|
|
# register: remoteit_service
|
|
# ignore_errors: yes
|
|
|
|
# - name: "Disable & Stop the actual service: {{ remoteit_service.stdout }}"
|
|
# systemd:
|
|
# name: "{{ remoteit_service.stdout }}"
|
|
# enabled: no
|
|
# state: stopped
|
|
# when: not remoteit_enabled and remoteit_service.stdout != ""
|
|
# ignore_errors: yes
|