nettoyage

README.md

@@ -1,6 +1,6 @@
 # gsb2023
 
-2023-01-06 
+2023-01-18 ps 
 
 Environnement et playbooks ansible pour le projet GSB 2023
 
@@ -8,15 +8,28 @@ Environnement et playbooks ansible pour le projet GSB 2023
 prérequis : 
   * une machine Debian Bullseye
   * VirtualBox
+  * fichier machines viruelles ova :
+    * debian-bullseye-gsb-2023a.ova
+    * debian-buster-gsb-2023a.ova
 
 
 
 ## Les machines
-  * s-adm
-  * s-infra
-  * r-int
-  * r-ext
-  * s-proxy
+  * s-adm : routeur adm, DHCP + NAT, deploiement, proxy squid 
+  * s-infra : DNS maitre
+  * r-int : routaage, DHCP 
+  * r-ext : routage, NAT
+  * s-proxy : squid
+  * s-itil : serveur GLPI
+  * s-backup : DNS esclave + sauvegarde s-win 
+  * s-mon : supervision avec **Nagios4** et syslog
+  * s-fog : deploiement postes de travail avec **FOG**
+  * s-win : Windows Server 2019, AD, DNS, DHCP, partage fichiers
+  * s-nxc : NextCloud avec **docker** 
+  * s-elk : pile ELK dockerisée
+  * s-lb  : Load Balancer **HaProxy** pour application Wordpress 
+  * r-vp1 : Routeur VPN Wireguard coté siège
+  * r-vp2 : Routeur VPN Wireguard coté agence, DHCP
 
 
 ## Les playbooks

graylog-pont.yml

@@ -1,8 +0,0 @@
----
-- hosts: localhost
-  connection: local
-
-  roles:
-    - goss
-    - docker-graylog-pont
-    - post

pre/inst-depl

@@ -1,5 +1,5 @@
 #!/bin/bash
-## ps : 2021-04-01 15:25
+## aa : 2023-04-18 15:25
 
 set -o errexit
 set -o pipefail

pre/pull-config

@@ -1,5 +1,9 @@
 #!/bin/bash
 
+dir=/root/tools/ansible
+prj=gsb2023
+opt=""
+
 if [ -z ${UREP+x} ]; then 
 	UREP=https://gitea.lyc-lecastel.fr/gadmin/gsb2023.git 
 fi
@@ -11,6 +15,14 @@ dir=/root/tools/ansible
 cd  "${dir}" || exit 1
 
 hostname  > hosts
-ansible-pull -i "${dir}/hosts"  -C main -U "${UREP}"
+if [[ $# == 1 ]] ; then
+	opt=$1
+fi
+if [[ "${opt}" == '-l'  ]] ; then
+   cd "${dir}/${prj}" || exit 2	
+   ansible-playbook -i localhost, -c local  "$(hostname).yml"
+else
+   ansible-pull -i "${dir}/hosts"  -C main -U "${UREP}"
+fi
 
 exit 0

proxy

@@ -1 +0,0 @@
-/etc/nginx/sites-availables/proxy

pull-config

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-if [ -z ${UREP+x} ]; then
+if [ -z ${UREP+x} ]; then 
 	UREP=https://gitea.lyc-lecastel.fr/gadmin/gsb2023.git 
 fi
 
@@ -11,6 +11,6 @@ dir=/root/tools/ansible
 cd  "${dir}" || exit 1
 
 hostname  > hosts
-ansible-pull -i "${dir}/hosts"  -U "${UREP}"
+ansible-pull -i "${dir}/hosts"  -C main -U "${UREP}"
 
 exit 0

roles/lb-nfs-server/README.md

@@ -0,0 +1,10 @@
+# Role s-nas-server
+## Installation de nfs-server et mise en oeuvre du partage /home/wordpress
+  
+Ce rôle :
+  * installe **nfs-server**
+  * copie le fichier de configuration **exports**  pour exporter le répertoire **/home/wordpress** 
+  * relance le service **nfs-server**
+
+### Objectif
+Le répertoire **/home/wordpress** est exporté par **nfs** sur le réseau **n-dmz-db**

roles/s-nas-server/README.md

@@ -1,3 +0,0 @@
-##Installation de nfs
-  
-Ce rôle télécharge NFS puis copie un fichier de configuration pour partager le dossier /home/wordpress.

s-lb-web3.yml

@@ -1,11 +0,0 @@
----
-- hosts: localhost
-  connection: local
-
-  roles:
-    - base
-    - s-lb-web-ab
-    - snmp-agent
-    - s-nas-client
-    - post
-

s-lb-wordpress3.yml

@@ -1,18 +0,0 @@
----
- - hosts: localhost
-   connection: local
-   vars:
-         wp_mysql_db: "wordpress"
-         wp_mysql_user: "wp"
-         wp_mysql_password: "wp"
-         wp_mysql_host: "192.168.102.50"
-
-   roles:
-     - base
-     - goss
-     - apache2
-     - s-lb-wordpress
-     - snmp-agent
-     - post
-     - mysql
-     - php-fpm

scripts/mkvm.pl

@@ -0,0 +1,135 @@
+#!/usr/pbin/perl
+use strict;
+use warnings;
+use v5.10;
+
+my $ovarelease = "2023a";
+my $ovafogrelease = "2023a";
+my $home=$ENV{'HOME'}; 
+my $ovafile="$home/Téléchargements/debian-bullseye-gsb-".$ovarelease.".ova";
+my $ovafilefog="$home/Téléchargements/debian-buster-gsb-i".$ovafogrelease.".ova";
+
+my %vmtab = (
+	#name => "s-adm", params => ":1024:"
+	name => "s-adm", params => ":1024:n-adm:n-infra",
+	name => "s-infra", params => ":1024:n-adm:n-infra",
+	name => "s-proxy", params => ":1024:n-adm:n-infra",
+	name => "r-int", params => ":1024:n-adm:n-link:n-wifi:n-user:n-infra",
+	name => "r-ext", params => ":1024:n-adm:n-dmz:eno1:n-linkvi:n-link",
+	name => "s-mon", params => ":1024:n-adm:n-infra",
+	name => "s-itil", params => ":1024:n-adm:n-infra",
+	name => "s-appli", params => ":1024:n-adm:n-infra",
+	name => "s-backup", params => ":1024:n-adm:n-infra",
+	name => "s-fog", params => ":1024:n-adm:n-infra:n-user",
+	name => "s-nxc", params => ":1024:n-adm:n-infra",
+
+)
+
+sub usage () {
+	say "$0 - version ${ovarelease}";
+	say "$0 : creation VM et parametrage interfaces";
+	say "usage : $0 <s-infra|r-int|r-ext|s-proxy|s-mon>";
+	exit 1 ;
+}
+
+sub create_vm () {
+	my $nom = shift  ; 
+	my $nomova = shift ;
+	if ( $nom == "s-fog" ) { 
+		$nomova = $ovafilefog;
+	}
+	if (  ! -r $nomova ) {
+		say "$0 : erreur ouverture fichier $nomova ..."
+		exit 3
+	}
+	qx (vboxmanage import $nomova  --vsys 0 --vmname $nom);
+}
+
+sub setif () {
+	my ($vm, $interf, $parm) = @ARGV;
+	qx(VBoxManage modifyvm $vm --nic"${2}" intnet);
+	qx(VBoxManage modifyvm $vm --intnet"${2}" "$3");
+	qx(VBoxManage modifyvm $vm --nictype"${2}" 82540EM);
+	qx(VBoxManage modifyvm $vm --cableconnected"${2}" on);
+	qx(VBoxManage modifyvm $vm --nicpromisc"${2}" allow-all);
+}
+
+sub create_if () {
+# enp0s3
+	setif "$1" 1 "$2"
+	setif "$1" 2 "$3"
+#(enp0s8)
+}
+
+
+create_vm "${vm}"
+if [[ "${vm}" == "s-infra" ]] ; then
+	create_if "${vm}" "n-adm" "n-infra"
+elif [[ "${vm}" == "s-proxy" ]] ; then
+	create_if "${vm}" "n-adm" "n-infra"
+elif [[ "${vm}" == "r-int" ]] ; then
+#	n-adm, n-link, n-wifi, n-user, n-infra
+	create_if "${vm}" "n-adm" "n-infra"
+	setif "${vm}" 2 "n-link"
+	setif "${vm}" 3 "n-wifi"
+	setif "${vm}" 4 "n-user"
+	setif "${vm}" 5 "n-infra"
+elif [[ "${vm}" == "r-ext" ]] ; then
+	./addint.r-ext
+elif [[ "${vm}" == "s-mon" ]] ; then
+        create_if "${vm}" "n-adm" "n-infra"
+elif [[ "${vm}" == "s-appli" ]] ; then
+        create_if "${vm}" "n-adm" "n-infra"
+elif [[ "${vm}" == "s-backup" ]] ; then
+        create_if "${vm}" "n-adm" "n-infra"
+elif [[ "${vm}" == "s-itil" ]] ; then
+        create_if "${vm}" "n-adm" "n-infra"
+elif [[ "${vm}" == "s-nxc" ]] ; then
+        create_if "${vm}" "n-adm" "n-infra"
+elif [[ "${vm}" == "s-fog" ]] ; then
+        create_if "${vm}" "n-adm" "n-infra"
+	setif "${vm}" 3 "n-user"
+elif [[ "${vm}" == "s-DNS-ext" ]] ; then
+        create_if "${vm}" "n-adm" "n-dmz"
+elif [[ "${vm}" == "s-web-ext" ]] ; then
+        create_if "${vm}" "n-adm" "n-dmz"
+elif [[ "${vm}" == "s-nxc" ]] ; then
+        create_if "${vm}" "n-adm" "n-infra"
+elif [[ "${vm}" == "s-lb" ]] ; then
+        create_if "${vm}" "n-adm" "n-dmz" "n-dmz-lb"
+elif [[ "${vm}" == "s-web1" ]] ; then
+        create_if "${vm}" "n-adm" "n-dmz-lb" "n-dmz-db"
+#	setif "${vm}" 3 "n-dmz-lb"
+elif [[ "${vm}" == "s-web2" ]] ; then
+        create_if "${vm}" "n-adm" "n-dmz-lb" "n-dmz-db"
+elif [[ "${vm}" == "s-web3" ]] ; then
+        create_if "${vm}" "n-adm" "n-dmz-lb" "n-dmz-db"
+ #       setif "${vm}" 3 "n-dmz-lb"
+elif [[ "${vm}" == "s-lb-bd" ]] ; then
+        create_if "${vm}" "n-adm" "n-dmz-db"
+elif [[ "${vm}" == "s-nas" ]] ; then
+        create_if "${vm}" "n-adm" "n-dmz-db"
+elif [[ "${vm}" == "r-vp1" ]] ; then
+	./addint.r-vp1
+elif [[ "${vm}" == "r-vp2" ]] ; then
+	./addint.r-vp2
+elif [[ "${vm}" == "s-agence" ]] ; then
+	create_if "${vm}" "n-adm" "n-agence"
+
+else
+	echo "$0 : vm ${vm} non prevu"
+        exit 2	
+fi	
+
+
+sub usage () {
+	 print "usage : mkvm.pl <vm-name>\n";
+	 print "cree une VM a partir d'un fichier OVA et parametre les interfaces";
+	 exit 1 ;
+}
+
+sub main () {
+	my $vm = shift;
+	usage unless ( $vm);
+
+}

snmp.yml

@@ -1,7 +0,0 @@
----
-- hosts: localhost
-  connection: local
-
-  roles:
-    - snmp-agent
-