maj

sio2/AP/apbase.yml

@@ -0,0 +1,25 @@
+---
+- name: apbase
+  hosts: web
+  become: yes
+  tasks:
+  - name: 1. Installer les paquets apache2 php et adminer
+    apt:
+      name:
+        - apache2 
+        - php
+        - adminer
+        - php-mbstring
+      state: present
+        #notify: 2. redémarrer apache et activer adminer
+  
+  - name: 2. redémarrer apache et activer adminer
+    shell: sudo a2enconf adminer
+
+  - name: 3. redémarrer apache et activer adminer
+    shell: sudo systemctl reload apache2    
+
+
+
+
+

sio2/AP/apdb.yml

@@ -0,0 +1,52 @@
+---
+- name: apdb
+  hosts: web
+  become: yes
+  tasks:
+
+    - name: 1. Installer mariadb
+      apt:
+        name:
+          - mariadb-server
+          - python3-pymysql
+        state: present
+
+    - name: 2. s'assurer que mariadb est en fonctionnement
+      service:
+        name: mariadb
+        state: started
+
+    - name: 3. Creer un utilisateur et  lui attribuer tous les droits
+      community.mysql.mysql_user:
+        name: admin
+        password: admin
+        priv: '*.*:ALL,GRANT'
+        state: present
+        login_unix_socket: /var/run/mysqld/mysqld.sock
+
+    - name: 4. Creation de la base de donnee  'sdis2023'
+      community.mysql.mysql_db:
+        name: sdis2023
+        state: present
+        login_unix_socket: /var/run/mysqld/mysqld.sock
+
+    - name: 5. copier la base de donnée sur l'hôte distant
+      copy:
+        src: sdis2023.sql
+        dest: /tmp/sdis2023.sql
+
+    - name: 6. Restore la base de donnée
+      community.mysql.mysql_db:
+        name: sdis2023
+        state: import
+        target: /tmp/sdis2023.sql
+        login_unix_socket: /var/run/mysqld/mysqld.sock
+
+          # - name: 5. Dump multiple databases
+          #community.mysql.mysql_db:
+          #state: dump
+          #name:
+          #- sdis2023
+          #target: sdis2023.sql
+          #login_unix_socket: /var/run/mysqld/mysqld.sock
+

sio2/AP/apdbdump.yml

@@ -0,0 +1,20 @@
+---
+- name: apdbdump
+  hosts: web
+  become: yes
+  tasks:
+
+    
+  - name: 1. Dump multiple databases
+    community.mysql.mysql_db:
+      state: dump
+      name: sdis2023
+      target: /tmp/sdis2023.sql
+      login_unix_socket: /var/run/mysqld/mysqld.sock
+
+  - name: 2. recuperation de sdis2023.sql avec fetch
+    ansible.builtin.fetch:
+      src: /tmp/sdis2023.sql
+      dest: sdis2023-dump.sql
+      flat: yes
+

sio2/AP/drop.yml

@@ -0,0 +1,12 @@
+---
+- name: apdb
+  hosts: web
+  become: yes
+  tasks:
+    - name: 1. Suppression de la base de donnee  'sdis2023'
+      community.mysql.mysql_db:
+        name: sdis2023
+        state: absent
+        login_unix_socket: /var/run/mysqld/mysqld.sock
+
+

sio2/AP/hosts

@@ -0,0 +1,2 @@
+[web]
+ap33prod

sio2/CYBER/Cryptage/crypt.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+unn=$1
+utilisateurmdp=$2
+action=$3
+ficcle=$4
+user=$(echo $utilisateurmdp| cut -f1 -d/ )
+mdp=$(echo $utilisateurmdp| cut -f2 -d/ )
+echo $user
+echo $mdp
+[ -e /tmp/share ] ||  mkdir /tmp/share
+mount.cifs -o "username=${user},password=${mdp}" //${unn}  /tmp/share
+if [[ $? == 0 ]] ;then
+	echo "le montage fonctionne cryptage en cours"
+	ccrypt ${action} -r -k ${ficcle} /tmp/share/*
+	umount /tmp/share
+	rm -r /tmp/share
+else
+	echo "erreur montage $?"
+	exit 1
+fi
+exit 0
+
+

sio2/CYBER/Wireguard/wg0-a.conf

@@ -1,15 +1,10 @@
-# local settings for Endpoint A
 [Interface]
-PrivateKey = aLihTWpe3bt3XwNPGOVS0mB9vfr4JqeZPyzhlgQ052k=
-Address = 10.0.0.1/32
-ListenPort = 51820
+PrivateKey = iGPtDYyKYCoQVPofdo7KQXfC4OGCGOBXonF44nKUSFw=
+Address = 10.0.0.2/32 # Adresses autorisées dans le VPN
+Listenport = 51820
 
-# IP forwarding
-PreUp = sysctl -w net.ipv4.ip_forward=1
-
-# remote settings for Endpoint B
 [Peer]
-PublicKey = 8bEwgf4jUaIvZslBNwQSP3sNrJPZg1YDiFqyMCvJszo=
-Endpoint = 192.168.3.2:51820
-AllowedIPs = 10.0.0.2/32, 192.168.2.0/24
+PublicKey = sAJc6fITMHs9Entb5upqGMN+4M+fnhIIpcWbQiqW50g= # de machine B
+AllowedIPs = 10.0.0.0/24 # le peer peut acceder au serveur
+Endpoint = 192.168.0.45:51820
 

sio2/CYBER/Wireguard/wg0-b.conf

@@ -0,0 +1,10 @@
+[Interface]
+Address = 10.0.0.1/32 # Adresses autorisées dans le VPN
+Listenport = 51820
+PrivateKey = YH3oUGyt8hXlqRINQIANWsqf7Bd+SJcyLhMLGPwbvHk=
+
+[Peer]
+PublicKey = k2Yzmoz+7e1TT+n2+zK9AHjssgQLp7DW0T3Zi+AtPV0= # de machine B
+AllowedIPs = 10.0.0.0/24 # le peer peut acceder au serveur
+Endpoint = 192.168.0.26:51820
+

sio2/CYBER/wg0-b.conf

@@ -1,15 +0,0 @@
-# local settings for Endpoint B
-[Interface]
-PrivateKey = eLqg4jQCId97MOdcP5k0FIlxnaMBArlPPEaTVmRPWFk=
-Address = 10.0.0.2/32
-ListenPort = 51820
-
-# IP forwarding
-PreUp = sysctl -w net.ipv4.ip_forward=1
-
-# remote settings for Endpoint A
-[Peer]
-PublicKey = 5UQzcels7MqDXWdt2oDvfbjykISpYl4i8uYFytHijUc=
-Endpoint = 192.168.3.2:51820
-AllowedIPs = 10.0.0.1/32, 192.168.1.0/24
-

sio2/SISR/Ansible/dokuw/hosts

@@ -0,0 +1,9 @@
+[adm]
+infra
+ 
+[web]
+web1
+web2
+
+[doc]
+doku

sio2/SISR/Ansible/dokuw/local.yml

@@ -0,0 +1,6 @@
+
+- hosts: doku
+  roles:
+    - web
+    - doku
+  

sio2/SISR/Ansible/dokuw/roles/doku/main.yml

@@ -0,0 +1,18 @@
+vars:
+  - chemin_fichier: /var/www/html/doku
+
+- name: recuperation dokuwiki-stable.tgz depuis machine depl
+  get_url:
+    url: http://depl/store/dokuwiki-stable.tgz
+    dest: /tmp/
+
+- name: Extraction archive
+  ansible.builtin.unarchive:
+    src: /tmp/dokuwiki-stable.tgz
+    dest: /var/www/html/
+
+- name: changer propriétaire du fichier var/www/html/doku
+    file:
+      path: "{{ chemin_fichier }}"
+      owner: www-data:www-data data lib conf
+      become: true

sio2/SISR/Ansible/dokuw/roles/doku/tasks/main.yml

@@ -0,0 +1,37 @@
+- name: 1. recuperation dokuwiki-stable.tgz depuis machine depl
+  get_url:
+    url: http://depl/store/dokuwiki-stable.tgz
+    dest: /tmp
+
+- name: 2. Extraction archive dokuwiki-stage.tgz
+  unarchive:
+    src: /tmp/dokuwiki-stable.tgz
+    dest: /var/www/html/
+    remote_src: yes
+
+- name: 3. stat dokuwiki
+  stat: 
+    path: /var/www/html/dokuwiki-2023-04-04
+  register: doku_stat
+
+- name: 4. On renomme doku-v... en doku
+  command: mv /var/www/html/dokuwiki-2023-04-04 /var/www/html/doku
+  when: doku_stat.stat.exists
+
+- name: 5. Changer propritaire group et permissions
+  file:
+    path: /var/www/html/doku
+    owner: root
+    group: root
+    mode: '0755'
+    recurse: yes
+      
+- name: 6. Changer propritaire. group et permissions
+  file:
+    path: /var/www/html/doku
+    owner: www-data
+    group: www-data
+    recurse: yes
+      #    mode: '755'
+
+

sio2/SISR/Ansible/dokuw/roles/web/tasks/main.yml

@@ -0,0 +1,13 @@
+- name: 1. installe  apache2 php et ces dependances
+  apt:
+    name:
+      - apache2
+      - php
+       #     - php-gd
+      - php-mbstring
+    state: present
+
+- name: 2. lance Apache
+  service:
+    name: apache2
+    state: started