blob: a64ffc52fdd3c5e58f086e494a6dd68e63cdc0bc (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
- name: install packages
dnf:
name: '{{ znc_packages }}'
state: present
- name: request TLS certificate
include_role:
name: getcert_request
vars:
certificate_service: irc
certificate_path: '{{ znc_certificate_path }}'
certificate_key_path: '{{ znc_certificate_key_path }}'
certificate_owner: znc
certificate_hook: pkill -HUP znc
- name: generate dhparams
openssl_dhparam:
path: '{{ znc_dhparams_path }}'
size: 2048
- import_tasks: freeipa.yml
tags: freeipa
- name: configure saslauthd for znc
copy:
src: etc/sasl2/znc.conf
dest: /etc/sasl2/znc.conf
notify: restart saslauthd
- name: enable saslauthd
systemd:
name: saslauthd
enabled: yes
state: started
- name: create config directories
file:
path: '{{ znc_home }}/{{ item }}'
state: directory
owner: znc
group: znc
mode: 0700
loop:
- ''
- 'configs'
- 'moddata'
- 'moddata/cyrusauth'
- name: generate config files
template:
src: '{{ znc_home[1:] }}/{{ item }}.j2'
dest: '{{ znc_home }}/{{ item }}'
owner: znc
group: znc
loop:
- configs/znc.conf
- moddata/cyrusauth/.registry
notify: reload znc
- name: start znc
systemd:
name: znc
enabled: yes
state: started
- name: forward https port
firewalld:
permanent: yes
immediate: yes
rich_rule: 'rule family={{ item }} forward-port port={{ 443 }} protocol=tcp to-port={{ znc_https_port }}'
state: enabled
loop:
- ipv4
- ipv6
tags: firewalld
- name: open firewall ports
firewalld:
permanent: yes
immediate: yes
service: '{{ item }}'
state: enabled
loop:
- ircs
- https
tags: firewalld
|
