suppresion utilisation role db-user

r-vp1.yml

@@ -12,9 +12,9 @@
    - base
    - goss
    - snmp-agent
-   - vpn-stg-r
+   - firewall-vpn-r
-#   - x509-r
+#  - vpn-stg-r
-#   - firewall-vpn-r
+   - x509-r
    - ssh-cli
    - syslog-cli
    - post

r-vp2.yml

@@ -15,9 +15,9 @@
    - dns-agence
    - ssh-root-access
    - snmp-agent
-   - vpn-stg-l
+   - firewall-vpn-l
-#   - x509-l
+#  - vpn-stg-l
-#   - firewall-vpn-l
+   - x509-l
    - ssh-cli
    - syslog-cli
    - post

roles/firewall-vpn-l/files/ferm.conf

@@ -7,9 +7,9 @@
 @def $DEV_VPN	= enp0s8;
 @def $DEV_EXT	= enp0s9;
 
-@def $NET_ADM=192.168.99.0/24;
+@def $NET_ADM=192.168.99.102/24;
-@def $NET_VPN=192.168.0.0/24;
+@def $NET_VPN=172.16.128.254/24;
-@def $NET_EXT=192.168.1.0/30;
+@def $NET_EXT=192.168.0.52/30;
 
 table filter {
     chain INPUT {

roles/firewall-vpn-r/files/ferm.conf

@@ -7,9 +7,9 @@
 @def $DEV_VPN	= enp0s8;
 @def $DEV_EXT	= enp0s9;
 
-@def $NET_ADM=192.168.99.0/24;
+@def $NET_ADM=192.168.99.112/24;
-@def $NET_VPN=192.168.0.0/24;
+@def $NET_VPN=192.168.0.51/24;
-@def $NET_EXT=192.168.1.0/30;
+@def $NET_EXT=192.168.1.2/30;
 
 table filter {
     chain INPUT {

roles/firewall-vpn-r/tasks/main.yml

@@ -1,15 +1,10 @@
 ---
-  - name: redemarrer interfaces
+- name : installer ferm
-    command: ifdown enp0s8
-  - name: redemarrer interfaces
-    command: ifup enp0s8
-  - name: redemarrer interfaces
-    command: ifdown enp0s9
-  - name: redemarrer interfaces
-    command: ifup enp0s9
-  - name: redemarrer interfaces
     apt: name=ferm state=present
+
   - name: fichier parefeu pour VPN
     copy: src=ferm.conf dest=/etc/ferm/ferm.conf
-    notify:
+  
-      - Restart ferm
+  - name: Restart ferm
+      name: ferm
+      state: restarted

s-lb-bd.yml

@@ -11,13 +11,14 @@
    roles:
      - base
      - goss
+     - post
      #- s-lb-bd-ab
      - mariadb-ab
-     - role: db-user
+#     - role: db-user
-       cli_ip: "192.168.102.1"
+#       cli_ip: "192.168.102.1"
-     - role: db-user
+#     - role: db-user
-       cli_ip: "192.168.102.2"
+#       cli_ip: "192.168.102.2"
-     - role: db-user
+#     - role: db-user
-       cli_ip: "192.168.102.3"     
+#       cli_ip: "192.168.102.3"     
      - snmp-agent
-     - post
+#     - post