diff options
author | Stonewall Jackson <stonewall@sacredheartsc.com> | 2023-02-04 01:23:43 -0500 |
---|---|---|
committer | Stonewall Jackson <stonewall@sacredheartsc.com> | 2023-02-04 01:52:13 -0500 |
commit | 0261e875679f1bf63c8d689da7fc7e014597885d (patch) | |
tree | 3f19cd74a0c1070944f75437f30b098d6ef2ffcb /roles/unifi/vars | |
download | selfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.tar.gz selfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.zip |
initial commit
Diffstat (limited to 'roles/unifi/vars')
-rw-r--r-- | roles/unifi/vars/main.yml | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/roles/unifi/vars/main.yml b/roles/unifi/vars/main.yml new file mode 100644 index 0000000..ee4362f --- /dev/null +++ b/roles/unifi/vars/main.yml @@ -0,0 +1,41 @@ +unifi_packages: + - java-11-openjdk-headless + - unifi + - mongodb-org-server + +unifi_keystore: /var/lib/unifi/data/keystore +unifi_certificate_hook_path: /usr/local/sbin/unifi-certificate-update.sh +unifi_certificate_path: /etc/pki/tls/certs/unifi.pem +unifi_certificate_key_path: /etc/pki/tls/private/unifi.key +unifi_certificate_ca_path: /etc/ipa/ca.crt + +unifi_autobackup_dir: /var/lib/unifi/data/backup/autobackup + +unifi_archive_shell: >- + cp --preserve=timestamps {{ unifi_autobackup_dir | quote }}/*.unf . + +unifi_mongodb_te: | + require { + type cgroup_t; + type configfs_t; + class dir { search getattr }; + class file { getattr open read }; + type file_type; + type mongod_t; + type proc_net_t; + type sysctl_fs_t; + type sysctl_net_t; + type var_lib_nfs_t; + } + + #============= mongod_t ============== + allow mongod_t cgroup_t:dir { search getattr }; + allow mongod_t cgroup_t:file { getattr open read }; + allow mongod_t configfs_t:dir getattr; + allow mongod_t file_type:dir { getattr search }; + allow mongod_t file_type:file getattr; + allow mongod_t proc_net_t:file { open read }; + allow mongod_t sysctl_fs_t:dir search; + allow mongod_t sysctl_net_t:dir search; + allow mongod_t sysctl_net_t:file { getattr read open }; + allow mongod_t var_lib_nfs_t:dir search; |