Actualiser sio2/AP4/provision/glpi.yml

README.md

@@ -1,3 +0,0 @@
-# siotp
-
-Ceci est le répertoire qui servira à accueillir les travaux du BTS SIO 

sio2/AP/apbase.yml

@@ -1,14 +1,25 @@
 ---
 - name: apbase
   hosts: web
-
-- name: Installer les paquets apache2 php adminer
+  become: yes
+  tasks:
+  - name: 1. Installer les paquets apache2 php et adminer
     apt:
       name:
         - apache2 
         - php
         - adminer
         - php-mbstring
-- state: present
+      state: present
+        #notify: 2. redémarrer apache et activer adminer
+  
+  - name: 2. redémarrer apache et activer adminer
+    shell: sudo a2enconf adminer
+
+  - name: 3. redémarrer apache et activer adminer
+    shell: sudo systemctl reload apache2    
+
+
+
 
 

sio2/AP/apdb.yml

@@ -1,49 +1,52 @@
 ---
-- name: apbase
+- name: apdb
   hosts: web
   become: yes
+  tasks:
 
-- name: Installer mariadb
+    - name: 1. Installer mariadb
       apt:
         name:
           - mariadb-server
-     - python3-PyMySQL
+          - python3-pymysql
         state: present
 
-- name: s'assurer que mariadb est en fonctionnement
+    - name: 2. s'assurer que mariadb est en fonctionnement
       service:
-      name: mariadb-server
+        name: mariadb
         state: started
 
-- name: Creer un utilisateur 'admin' lui attribuer tous les droits 
+    - name: 3. Creer un utilisateur et  lui attribuer tous les droits
       community.mysql.mysql_user:
         name: admin
         password: admin
-    priv: '*.*:ALL'
+        priv: '*.*:ALL,GRANT'
         state: present
+        login_unix_socket: /var/run/mysqld/mysqld.sock
 
-- name: Creation de la base de donnee  'sdis2023'
-  mysql_db:
+    - name: 4. Creation de la base de donnee  'sdis2023'
+      community.mysql.mysql_db:
         name: sdis2023
         state: present
+        login_unix_socket: /var/run/mysqld/mysqld.sock
 
-# Copy database dump file to remote host and restore it to database 'sdis2023'
-- name: Copie du dump de la BDD 
+    - name: 5. copier la base de donnée sur l'hôte distant
       copy:
         src: sdis2023.sql
-    dest: /tmp/
+        dest: /tmp/sdis2023.sql
 
-- name: Restore database
+    - name: 6. Restore la base de donnée
       community.mysql.mysql_db:
         name: sdis2023
         state: import
-    target: /tmp/sdis2023
+        target: /tmp/sdis2023.sql
+        login_unix_socket: /var/run/mysqld/mysqld.sock
 
-      #- name: Restore d
+          # - name: 5. Dump multiple databases
           #community.mysql.mysql_db:
-      #name: my_db
-      #state: import
-      #target: /tmp/dump.sql.bz2
-      #force: true
-
+          #state: dump
+          #name:
+          #- sdis2023
+          #target: sdis2023.sql
+          #login_unix_socket: /var/run/mysqld/mysqld.sock
 

sio2/AP/apdbdump.yml

@@ -1,10 +1,20 @@
 ---
 - name: apdbdump
   hosts: web
+  become: yes
+  tasks:
 
-- name: 1. recuperation de sdis2023.sql avec fetch
+    
+  - name: 1. Dump multiple databases
+    community.mysql.mysql_db:
+      state: dump
+      name: sdis2023
+      target: /tmp/sdis2023.sql
+      login_unix_socket: /var/run/mysqld/mysqld.sock
+
+  - name: 2. recuperation de sdis2023.sql avec fetch
     ansible.builtin.fetch:
       src: /tmp/sdis2023.sql
-        dest: ~/ansible/backup/
+      dest: sdis2023-dump.sql
       flat: yes
 

sio2/AP/drop.yml

@@ -0,0 +1,12 @@
+---
+- name: apdb
+  hosts: web
+  become: yes
+  tasks:
+    - name: 1. Suppression de la base de donnee  'sdis2023'
+      community.mysql.mysql_db:
+        name: sdis2023
+        state: absent
+        login_unix_socket: /var/run/mysqld/mysqld.sock
+
+

sio2/AP4/Vagrantfile

@@ -0,0 +1,22 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+Vagrant.configure("2") do |config|
+  config.vm.provision "shell", inline: <<-SHELL
+#     export http_proxy=http://10.121.38.1:8080
+#     export https_proxy=http://10.121.38.1:8080
+     timedatectl set-timezone Europe/Paris
+     apt-get -y update
+     apt-get -y upgrade 
+  SHELL
+
+  config.vm.define "glpi" do |glpi| # VM No'1
+    glpi.vm.box = "debian/bookworm64" # Type de la machine 
+    glpi.vm.hostname = "glpi" # Nom de la machine
+    glpi.vm.network "public_network" #, ip: "192.168.0.111"# Set static IP
+    glpi.vm.provision "ansible" do |ansible|
+      ansible.playbook = "provision/glpi.yml" # Lance le playbook glpi.yml
+    end
+  end
+end
+

sio2/AP4/hosts

@@ -0,0 +1,2 @@
+[web]
+glpi

sio2/AP4/provision/glpi.yml

@@ -0,0 +1,7 @@
+---
+- hosts: all
+  become: true
+  roles:
+    - web
+    - bdd
+    - glpi

sio2/AP4/provision/roles/bdd/handlers/main.yml

@@ -0,0 +1,5 @@
+---
+  - name: restart mariadb
+    service:
+      name: mariadb.service
+      state: restarted

sio2/AP4/provision/roles/bdd/tasks/main.yml

@@ -0,0 +1,29 @@
+- name: 1. Installer mariadb
+  apt:
+    name:
+      - mariadb-server 
+      - python3-pymysql
+    state: present
+
+- name: 2. s'assurer que mariadb est en fonctionnement
+  service:
+    name: mariadb
+    state: started
+
+- name: 3. Creer un utilisateur et  lui attribuer tous les droits
+  community.mysql.mysql_user:
+    name: glpi
+    password: glpi
+    priv: '*.*:ALL,GRANT'
+    state: present
+    login_unix_socket: /var/run/mysqld/mysqld.sock
+  notify:
+    - restart mariadb
+
+- name: 4. Creation de la base de donnee  'db_glpi'
+  community.mysql.mysql_db:
+    name: db_glpi
+    state: present
+    login_unix_socket: /var/run/mysqld/mysqld.sock
+  notify:
+    - restart mariadb

sio2/AP4/provision/roles/glpi/tasks/main.yml

@@ -0,0 +1,21 @@
+--- 
+- name: 1. Telechargement de l'archive de glpi 10.0.10
+  get_url:
+    url: http://depl.sio.lan/store/glpi-10.0.10.tgz
+    dest: /tmp
+
+- name: 2.  Extraire glpi 10.0.10.tgz vers /tmp/
+  ansible.builtin.unarchive:
+    src: /tmp/glpi-10.0.10.tgz
+    dest: /var/www/html/
+    remote_src: true 
+
+- name: 3.  Changer propritaire group et permissions
+  file:
+    path: /var/www/html/glpi
+    owner: www-data
+    group: www-data
+    mode: '0755'
+    recurse: yes
+
+

sio2/AP4/provision/roles/web/handlers/main.yml

@@ -0,0 +1,6 @@
+--- 
+- name: restart apache2
+  service: 
+    name: apache2
+    state: restarted
+

sio2/AP4/provision/roles/web/tasks/main.yml

@@ -0,0 +1,30 @@
+---
+- name: 1. Installer apache php 
+  apt:
+    name:
+      - apache2 
+      - php
+      - curl 
+    state: present
+
+      #notify: 2. redémarrer apache et activer adminer 
+- name: 2. Installation des extensions php de GLPI
+  apt:
+    name:
+      - php-xml 
+      - php-common
+      - php-json
+      - php-mysql
+      - php-mbstring
+      - php-curl
+      - php-gd
+      - php-intl
+      - php-imap
+      - php-apcu
+      - php-zip
+      - php-xmlrpc
+      - php-bz2
+      - php-ldap
+    state: present
+  notify:
+    - restart apache2

sio2/CYBER/Wireguard/wg0-a.conf

@@ -1,15 +1,10 @@
-# local settings for Endpoint A
 [Interface]
-PrivateKey = aLihTWpe3bt3XwNPGOVS0mB9vfr4JqeZPyzhlgQ052k=
-Address = 10.0.0.1/32
-ListenPort = 51820
+PrivateKey = iGPtDYyKYCoQVPofdo7KQXfC4OGCGOBXonF44nKUSFw=
+Address = 10.0.0.2/32 # Adresses autorisées dans le VPN
+Listenport = 51820
 
-# IP forwarding
-PreUp = sysctl -w net.ipv4.ip_forward=1
-
-# remote settings for Endpoint B
 [Peer]
-PublicKey = 8bEwgf4jUaIvZslBNwQSP3sNrJPZg1YDiFqyMCvJszo=
-Endpoint = 192.168.3.2:51820
-AllowedIPs = 10.0.0.2/32, 192.168.2.0/24
+PublicKey = sAJc6fITMHs9Entb5upqGMN+4M+fnhIIpcWbQiqW50g= # de machine B
+AllowedIPs = 10.0.0.0/24 # le peer peut acceder au serveur
+Endpoint = 192.168.0.45:51820
 

sio2/CYBER/Wireguard/wg0-b.conf

@@ -0,0 +1,10 @@
+[Interface]
+Address = 10.0.0.1/32 # Adresses autorisées dans le VPN
+Listenport = 51820
+PrivateKey = YH3oUGyt8hXlqRINQIANWsqf7Bd+SJcyLhMLGPwbvHk=
+
+[Peer]
+PublicKey = k2Yzmoz+7e1TT+n2+zK9AHjssgQLp7DW0T3Zi+AtPV0= # de machine B
+AllowedIPs = 10.0.0.0/24 # le peer peut acceder au serveur
+Endpoint = 192.168.0.26:51820
+

sio2/CYBER/wg0-b.conf

@@ -1,15 +0,0 @@
-# local settings for Endpoint B
-[Interface]
-PrivateKey = eLqg4jQCId97MOdcP5k0FIlxnaMBArlPPEaTVmRPWFk=
-Address = 10.0.0.2/32
-ListenPort = 51820
-
-# IP forwarding
-PreUp = sysctl -w net.ipv4.ip_forward=1
-
-# remote settings for Endpoint A
-[Peer]
-PublicKey = 5UQzcels7MqDXWdt2oDvfbjykISpYl4i8uYFytHijUc=
-Endpoint = 192.168.3.2:51820
-AllowedIPs = 10.0.0.1/32, 192.168.1.0/24
-