blob: 4892782da6e47b80d436241317307fd11d5ab8dc (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
- name: install packages
dnf:
name: '{{ apache_packages }}'
state: present
notify: restart apache
- name: remove default configuration
copy:
content: |
# this file intentionally empty to avoid clobbering during package upgrades
dest: /etc/httpd/conf.d/welcome.conf
notify: reload apache
- name: generate config files
template:
src: etc/httpd/{{ item }}.j2
dest: /etc/httpd/{{ item }}
loop:
- conf/httpd.conf
- conf.d/ssl.conf
- conf.d/letsencrypt.conf
register: apache_global_config
- name: reload apache
systemd:
name: httpd
state: reloaded
when: apache_global_config.changed
- name: set selinux booleans
seboolean:
name: '{{ item.sebool }}'
state: '{{ item.value }}'
persistent: yes
loop:
- { sebool: httpd_use_nfs, value: '{{ apache_use_nfs }}' }
- { sebool: httpd_can_network_relay, value: '{{ apache_can_network_relay }}' }
- { sebool: httpd_can_network_connect, value: '{{ apache_can_network_connect }}' }
- { sebool: httpd_can_connect_ldap, value: '{{ apache_gssapi or apache_can_connect_ldap}}' }
- { sebool: httpd_can_network_connect_db, value: '{{ apache_can_network_connect_db }}' }
- { sebool: httpd_can_sendmail, value: '{{ apache_can_sendmail }}' }
tags: selinux
- name: configure mod_gssapi
import_tasks: gssapi.yml
when: apache_gssapi or apache_use_nfs
- name: enable apache
systemd:
name: httpd
enabled: yes
state: started
- name: open firewall ports
firewalld:
service: '{{ item }}'
permanent: yes
immediate: yes
state: enabled
loop:
- http
- https
tags: firewalld
|