self-hosting/roles/icinga2_master/tasks/main.yml
Tunui Franken 1d259156ca Use fixed addresses for accessing each host
No need for ansible_facts.default_ipv4 which yields errors
2025-01-24 10:14:47 +01:00

61 lines
1.5 KiB
YAML

---
- name: Allow icinga2 to/from Agent
become: true
ansible.builtin.template:
src: "nftables/{{ item }}.d/icinga2.conf.j2"
dest: "/etc/nftables/{{ item }}.d/icinga2.conf"
mode: 0640
loop:
- input
- output
notify: Reload nftables service
- name: Add Icinga2 Agent to /etc/hosts
become: true
ansible.builtin.lineinfile:
path: /etc/hosts
line: "{{ hostvars[icinga2_agent].ipv4_addr }}\t{{ icinga2_agent }}"
- name: Setup Master node
become: true
ansible.builtin.command:
cmd: "icinga2 node setup --master --cn {{ ansible_hostname }} --disable-confd"
creates: "/var/lib/icinga2/certs/{{ ansible_hostname }}.crt"
notify: Restart icinga2 service
- name: Copy zones.conf file
become: true
ansible.builtin.template:
src: zones.conf.j2
dest: /etc/icinga2/zones.conf
owner: nagios
group: nagios
mode: 0644
notify: Reload icinga2 service
- name: Create master zone directory
become: true
ansible.builtin.file:
path: /etc/icinga2/zones.d/master
state: directory
owner: nagios
group: nagios
mode: 0750
- name: Copy files under master zone directory
become: true
ansible.builtin.template:
src: "{{ item }}"
dest: "/etc/icinga2/zones.d/master/{{ item | basename | replace('.j2', '') }}"
owner: nagios
group: nagios
mode: 0644
with_fileglob:
- "{{ role_path }}/templates/zones.d/master/*"
notify: Reload icinga2 service
- name: Install bsd-mailx for sending mail notifications
become: true
ansible.builtin.apt:
name: bsd-mailx