lisezmoi.txt

@@ -7,7 +7,7 @@ Ce document décrit les divers élements du projet GSB du BTS SIO utilisé pour
 Le projet GSB décrit les diférents playbooks permttant d'installer les
 machines du projet GSB
 
-Les répertoires : 
+Les répertoires :
 
 - roles : les roles
 - goss : les outils de test

roles/dns-master/files/db.gsb.lan

@@ -5,7 +5,7 @@
 ;
 $TTL    604800
 @       IN      SOA     s-infra.gsb.lan. root.s-infra.gsb.lan. (
-                        2023051000      ; Serial
+                        2023040501      ; Serial
                         7200	        ; Refresh
                         86400           ; Retry
                         8419200         ; Expire
@@ -36,5 +36,4 @@ s-web2          IN      A       192.168.101.2
 s-lb.gsb.lan    IN      A       192.168.100.10
 ns   	        IN      CNAME   s-infra.gsb.lan.
 wpad		IN	CNAME	s-infra.gsb.lan.
-s-peertube	IN	A	192.168.100.20
+peertube	IN	A	192.168.100.20
-peertube 	IN 	CNAME 	s-peertube

roles/dns-master/files/db.gsb.lan.rev

@@ -27,4 +27,5 @@ $TTL    604800
 100.10   IN      PTR      s-lb.gsb.lan
 11.0	  IN	  PTR	  s-elk.gsb.lan.
 17.0	  IN	  PTR	  s-gestsup.lan
-254.0     IN      PTR     r-int.gsb.lan.
+254.0     IN      PTR     r-int.gsb.lan.
+100.20	IN	PTR	  s-peertube

roles/fog/tasks/main.yml

@@ -22,5 +22,5 @@
   command: "cp /root/tools/ansible/roles/fog/files/fogsettings /opt/fog/"
 
 - name: fichier fogsettings en .fogsettings
-  command: "mv /opt/fog/fogsettings /opt/fog/.fogsettings"
+command: "mv /opt/fog/fogsettings /opt/fog/.fogsettings"
 

roles/fw-ferm/files/ferm.conf.r-vp2

@@ -51,7 +51,6 @@ table filter {
     chain FORWARD {
         policy ACCEPT;
 
-	proto icmp icmp-type echo-request ACCEPT;
         # connection tracking
         mod state state INVALID DROP;
         mod state state (ESTABLISHED RELATED) ACCEPT;

roles/peertube-k3s/tasks/main.yml

@@ -14,7 +14,7 @@
       host: localhost
 
   - name: installation de k3s...
-    shell: curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="--node-ip=192.168.100.20 --flannel-iface=enp0s8" sh -s - --docker
+    shell: curl -sfL https://get.k3s.io | sh -s - --docker
 
   - name: attente de l'installation de k3s...
     wait_for:

roles/peertube/files/finish

@@ -1,9 +0,0 @@
-MYHOST=peertube.gsb.lan;
-export KUBECONFIG=/etc/rancher/k3s/k3s.yaml;
-openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.cert -subj /CN="${MYHOST}"/O="${MYHOST}" -addext "subjectAltName = DNS:${MYHOST}";
-kubectl create secret tls tls-peertube --key tls.key --cert tls.cert;
-helm repo add postgresql https://charts.bitnami.com/bitnami;
-helm repo add redis https://charts.bitnami.com/bitnami;
-helm repo add mail https://bokysan.github.io/docker-postfix;
-helm install --create-namespace -n peertube peertube-gsb /root/tools/peertube/helm/ ;
-kubectl config view --raw > ~/.kube/config

roles/peertube/files/resolv.conf

@@ -1,4 +1 @@
-domain gsb.lan
+nameserver 192.168.99.99
-search gsb.lan
-nameserver 172.16.0.1
-nameserver 192.168.99.99

roles/peertube/files/values.yaml

@@ -45,7 +45,7 @@ peertube:
     dbPasswd: user # must be consistent with postgresql configuration
     dbSsl: false # disabled by default WARNING: ssl connection feature not tested, use at your own risk
     dbHostname: peertube-gsb-postgresql # must be consistent with postgresql configuration
-    webHostname: peertube.gsb.lan # must be changed to your local setup
+    webHostname: s-peertube.gsb.lan # must be changed to your local setup
     secret: b2753b0f37444974de0e81f04815e6a889fcf8960bd203a01b624d8fa8a37683
     smtpHostname: peertube-gsb-mail # must be consistent with mail configuration
     smtpPort: 587 # must be consistent with mail configuration
@@ -98,21 +98,21 @@ redis:
 
 ## ingress configuration is very specific this part must be configured or else you'll get 503 or 404 errors
 ingress:
-  enabled: true
+  enabled: false
   className: ""
   annotations: 
-    kubernetes.io/ingress.class: traefik
+    kubernetes.io/ingress.class: nginx
-    traefik.ingress.kubernetes.io/proxy-body-size: 6G # this caps the size of imported videos, if set low this might prevent you from uploading videos
+    nginx.ingress.kubernetes.io/proxy-body-size: 4G # this caps the size of imported videos, if set low this might prevent you from uploading videos
     # kubernetes.io/tls-acme: "true"
   hosts:
-    - host: peertube.gsb.lan
+    - host: # your domain here
       paths:
         - path: /
           pathType: ImplementationSpecific
-  tls:
+  tls: 
-    - secretName: tls-peertube
+  #  - secretName: chart-example-tls
     - hosts:
-      - peertube.gsb.lan
+      -  # your domain here
 
 resources: {}
 autoscaling:

roles/peertube/tasks/main.yml

@@ -18,11 +18,17 @@
       dest: /root/tools/peertube/helm/
       mode: '0644'
 
-  - name: copie du script finish...
-    copy:
-      src: /root/tools/ansible/gsb2023/roles/peertube/files/finish
-      dest: /root
-      mode: '0644'
-
   - name: installation de helm...
     shell: curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
+
+  - name: exposition du cluster...
+    command: KUBECONFIG=/etc/rancher/k3s/k3s.yaml
+
+  - name: mise a jour de la configuration de kubectl...
+    command: kubectl config view --raw > ~/.kube/config
+
+  - name: installation de peertube...
+    shell: helm repo add postgresql https://charts.bitnami.com/bitnami && helm repo add redis https://charts.bitnami.com/bitnami && helm repo add mail https://bokysan.github.io/docker-postfix
+
+  - name: lancement du helm chart peertube...
+    shell: helm install --create-namespace -n peertube peertube-gsb /root/tools/peertube/helm/

roles/post/files/interfaces.r-int

@@ -34,4 +34,4 @@ iface enp0s10 inet static
 allow-hotplug enp0s16
 iface enp0s16 inet static
 	address 172.16.0.254/24
-	post-up sleep 10 && systemctl restart isc-dhcp-server	
+	

roles/r-int/tasks/main.yml

@@ -17,13 +17,3 @@
 
   #- name: extraction fog.tar.gz
   #unarchive: src=/tmp/fog.tar.gz  dest=/var/www/ copy=no
-
-#- name: delais 2 secondes isc-dhcp-service
-#  become: yes
-#  lineinfile:
-#    path: /etc/init.d/isc-dhcp-server
-#    insertafter: '^\s+start\)$'
-#    line: "                sleep 2"
-#    firstmatch: yes
-#    state: present
-#    backup: yes

roles/wireguard-l/README.md

@@ -1,5 +1,5 @@
-# ajout du sleep 5
+#ajout du sleep 5
 
-~~éditer "/etc/init.d/isc-dhcp-server"~~
+éditer "/etc/init.d/isc-dhcp-server"
-~~aller au "case \"$1\" in" et rajouter "sleep 5" avant le "if"~~
+aller au "case \"$1\" in" et rajouter "sleep 5" avant le "if"
 

windows/mkusr-backup.cmd

@@ -1,4 +1,3 @@
-@echo off
 net group gg-backup /ADD
 call mkusr uBackup "u-backup" gg-backup
 icacls "C:\gsb\partages\public" /Grant:r uBackup:M /T

windows/mkusr-compta.cmd

@@ -1,5 +1,4 @@
-@echo off
 call mkusr aDupont "Albert Dupon" gg-compta
 call mkusr cSeum "Claire Seum" gg-compta
 call mkusr nPaul "Nicolas Paul" gg-compta
-call mkusr atour "Alexandre Tour" gg-compta
+call mkusr atour "Alexandre Tour" gg-compta

windows/mkusr-nextcloud.cmd

@@ -1,2 +0,0 @@
-@echo off
-call mkusr nextcloud "nextcloud" nextcloud