Compare commits

...

10 Commits

Author SHA1 Message Date
Elam Monnot
41bd6ac61e feat: changed the way peertube role is handled 2023-04-04 10:24:41 +02:00
Elam Monnot
7ce68f6293 fix: misleading docs by redhat ;p 2023-04-04 09:38:16 +02:00
Elam Monnot
bac2f067a9 fix: sychronized roles for peertube 2023-04-04 09:27:12 +02:00
Elam Monnot
d6d4991c16 fix: edited postfix configuration 2023-04-04 09:20:33 +02:00
Elam Monnot
2f7544c3a1 fix: changed order of task in main.yaml 2023-04-04 09:01:02 +02:00
Elam Monnot
c83ba7c977 fix: changed the way peertube is installed for better comprehension 2023-04-04 08:56:47 +02:00
root
1532c8bdd0 Merge branch 'main' of https://gitea.lyc-lecastel.fr/gadmin/gsb2023 2023-04-04 08:42:51 +02:00
Elam Monnot
08c73d0416 fix: cluster reacheable during install process 2023-04-04 08:41:40 +02:00
root
083b112d03 push ferm.conf 2023-04-04 08:41:20 +02:00
Elam Monnot
252618618b fix: mispelling in main.yaml for peertube 2023-04-04 08:33:55 +02:00
7 changed files with 39 additions and 21 deletions

View File

@@ -35,23 +35,22 @@ table filter {
proto (udp tcp) dport domain ACCEPT; proto (udp tcp) dport domain ACCEPT;
proto udp dport bootps ACCEPT; proto udp dport bootps ACCEPT;
} }
# interface réseau # interface réseau
interface $DEV_WORLD {
}
# the rest is dropped by the above policy # the rest is dropped by the above policy
}#FIN INPUT }#FIN INPUT
# outgoing connections are not limited # outgoing connections are not limited
chain OUTPUT {policy ACCEPT; chain OUTPUT {
policy ACCEPT;
# interface $DEV_VPN proto ssh dport 22 ACCEPT;
}#FIN OUTPUT }#FIN OUTPUT
chain FORWARD { chain FORWARD {
policy ACCEPT; policy ACCEPT;
proto icmp icmp-type echo-request ACCEPT; proto icmp icmp-type echo-request ACCEPT;
}
# connection tracking # connection tracking
mod state state INVALID DROP; mod state state INVALID DROP;
mod state state (ESTABLISHED RELATED) ACCEPT; mod state state (ESTABLISHED RELATED) ACCEPT;

View File

View File

@@ -0,0 +1,23 @@
---
- name: mise a jour de resolv.conf...
copy:
src: /root/tools/ansible/gsb2023/roles/peertube/files/resolv.conf
dest: /etc/
mode: '0644'
- name: installation de docker...
shell: curl https://releases.rancher.com/install-docker/20.10.sh | sh
- name: attente de l'installation...
wait_for:
timeout: 30
host: localhost
- name: installation de k3s...
shell: curl -sfL https://get.k3s.io | sh -s - --docker
- name: mise a jour de resolv.conf...
copy:
src: /root/tools/ansible/gsb2023/roles/peertube/files/resolv.conf
dest: /etc/
mode: '0644'

View File

@@ -71,7 +71,7 @@ mail:
enbled: true enbled: true
config: config:
general: general:
ALLOWED_SENDER_DOMAINS: # should be the same as your web domain ALLOWED_SENDER_DOMAINS: "yes"
DKIM_AUTOGENERATE: "yes" DKIM_AUTOGENERATE: "yes"
opendkim: opendkim:
RequireSafeKeys: "no" RequireSafeKeys: "no"

View File

@@ -1,16 +1,4 @@
--- ---
- name: installation de docker...
shell: curl https://releases.rancher.com/install-docker/20.10.sh | sh
- name: installation de k3s...
shell: curl -sfL https://get.k3s.io | sh -s - --docker
- name: mise a jour de resolv.conf...
copy:
src: /root/tools/ansible/gsb2023/roles/peertube/files/resolv.conf
dest: /etc/
mode '0644'
- name: création du répertoire du dépot peertube... - name: création du répertoire du dépot peertube...
file: file:
path: /root/tools/peertube path: /root/tools/peertube
@@ -22,6 +10,7 @@
repo: https://github.com/Elam-Monnot/Peertube-helm.git repo: https://github.com/Elam-Monnot/Peertube-helm.git
dest: /root/tools/peertube dest: /root/tools/peertube
clone: yes clone: yes
force: yes
- name: copie de values.yaml... - name: copie de values.yaml...
copy: copy:
@@ -33,4 +22,10 @@
shell: curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash shell: curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
- name: installation de peertube... - name: installation de peertube...
shell: helm repo add postgresql https://charts.bitnami.com/bitnami && helm repo add redis https://charts.bitnami.com/bitnami && helm repo add mail https://bokysan.github.io/docker-postfix && helm dependency build /root/tools/peertube/helm/ && helm install --create-namespace -n peertube peertube-gsb /root/tools/peertube/helm shell: helm repo add postgresql https://charts.bitnami.com/bitnami && helm repo add redis https://charts.bitnami.com/bitnami && helm repo add mail https://bokysan.github.io/docker-postfix
- name: exposition du cluster...
shell: export KUBECONFIG=/etc/rancher/k3s/k3s.yaml
- name: lancement du helm chart peertube...
shell: helm install --create-namespace -n peertube peertube-gsb /root/tools/peertube/helm

View File

@@ -14,4 +14,4 @@ iface enp0s3 inet static
allow-hotplug enp0s8 allow-hotplug enp0s8
iface enp0s8 inet static iface enp0s8 inet static
address 192.168.100.20/24 address 192.168.100.20/24
post-up systemctl start k3s && export KUBECONFIG=/etc/rancher/k3s/k3s.yaml post-up systemctl start k3s && sleep 20 && export KUBECONFIG=/etc/rancher/k3s/k3s.yaml

View File

@@ -7,4 +7,5 @@
- post - post
- snmp-agent - snmp-agent
- ssh-cli - ssh-cli
- peertube-k3s
- peertube - peertube