Compare commits
13 Commits
Author | SHA1 | Date | |
---|---|---|---|
58fce0cb34 | |||
b915854182 | |||
6df61a4e4c | |||
3841439cb7 | |||
8981505599 | |||
c06cc4ba56 | |||
c23ca58aba | |||
97fa278983 | |||
4eac7a1bb6 | |||
be3a3ba9de | |||
38a73a4c5b | |||
8d0119c4bb | |||
9a8cbf4d6c |
@ -1,6 +1,6 @@
|
|||||||
# vagrant
|
# vagrant
|
||||||
|
|
||||||
le 2023-06-25 00h30 - ps
|
le 2024-12-14 21h30 - ps
|
||||||
|
|
||||||
Ce dépôt héberge des **Vagrantfile** dont :
|
Ce dépôt héberge des **Vagrantfile** dont :
|
||||||
* **dns** : Vagrantfile pour 2 serveurs **Bind9** (1 maitre et un esclave), tests **goss** chainés
|
* **dns** : Vagrantfile pour 2 serveurs **Bind9** (1 maitre et un esclave), tests **goss** chainés
|
||||||
@ -19,8 +19,14 @@ Ce dépôt héberge des **Vagrantfile** dont :
|
|||||||
* **guacamole** : Vagrantfile pour Apache Guacamole dockerise sans frontal
|
* **guacamole** : Vagrantfile pour Apache Guacamole dockerise sans frontal
|
||||||
* **k8s** : kubernetes 1.26.00 + playbook pour master **k8s-master** et 2 noeuds **node-1** et **node-2**
|
* **k8s** : kubernetes 1.26.00 + playbook pour master **k8s-master** et 2 noeuds **node-1** et **node-2**
|
||||||
* **k3s-awx** : Vagrantfile + script **inst-awx** pour installation **Ansible AWX** sur **k3s** avec **awx-on-k3s**
|
* **k3s-awx** : Vagrantfile + script **inst-awx** pour installation **Ansible AWX** sur **k3s** avec **awx-on-k3s**
|
||||||
|
* **kea-dhcp-ha** : Vagrantfile pour serveur DHCP kea - HA - tests non finalisés
|
||||||
|
* **lldap** : Vagrantfile pour serveur LDAP en mode service **lldap**
|
||||||
|
* **lldap2** : Vagrantfile pour serveur LDAP en mode service **lldap** - integration pour Proxmox
|
||||||
* **minione**
|
* **minione**
|
||||||
|
* **netbox** : Vagrantfile pour Netbox dockerisée
|
||||||
* **rundeck** : Vagrantfile + playbook pour installation avec Mariadb
|
* **rundeck** : Vagrantfile + playbook pour installation avec Mariadb
|
||||||
* **samba-ad-dc** : Vagrantfile + playbook pour **Samba 4.17 ad-dc** sur **Debian 12 Bookworm**
|
* **samba-ad-dc** : Vagrantfile + playbook pour **Samba 4.17 ad-dc** sur **Debian 12 Bookworm**
|
||||||
|
|
||||||
* **wp-lb** : Wordpress web1 et web2, lb HaProxy, nfs, db Mariadb - Vagrantfile + playbooks
|
* **wp-lb** : Wordpress web1 et web2, lb HaProxy, nfs, db Mariadb - Vagrantfile + playbooks
|
||||||
|
* **zabbix** : Vagrantfile pour VM Debian 12 **zabbix7** Srv et VM Debian 12 **web1** apache, zabbix agent2
|
||||||
|
|
||||||
|
2
docker-traefik-nextcloud/Vagrantfile
vendored
2
docker-traefik-nextcloud/Vagrantfile
vendored
@ -12,7 +12,7 @@ Vagrant.configure("2") do |config|
|
|||||||
|
|
||||||
# Every Vagrant development environment requires a box. You can search for
|
# Every Vagrant development environment requires a box. You can search for
|
||||||
# boxes at https://vagrantcloud.com/search.
|
# boxes at https://vagrantcloud.com/search.
|
||||||
config.vm.box = "debian/bullseye64"
|
config.vm.box = "debian/bookworm64"
|
||||||
config.vm.hostname = "nextcloud-traefik"
|
config.vm.hostname = "nextcloud-traefik"
|
||||||
|
|
||||||
# Disable automatic box update checking. If you disable this, then
|
# Disable automatic box update checking. If you disable this, then
|
||||||
|
@ -82,7 +82,7 @@ cat > ./config/dynamic.yml <<EOT
|
|||||||
http:
|
http:
|
||||||
routers:
|
routers:
|
||||||
traefik:
|
traefik:
|
||||||
rule: "Host(`traefik.docker.localhost`)"
|
rule: "Host(\`traefik.docker.localhost\`)"
|
||||||
service: "api@internal"
|
service: "api@internal"
|
||||||
tls:
|
tls:
|
||||||
domains:
|
domains:
|
||||||
@ -100,7 +100,7 @@ tls:
|
|||||||
EOT
|
EOT
|
||||||
|
|
||||||
|
|
||||||
cat > nextcloud.yml <<'EOT'
|
cat > nextcloud.yml <<EOT
|
||||||
version: '2'
|
version: '2'
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
@ -145,14 +145,14 @@ services:
|
|||||||
- nxc
|
- nxc
|
||||||
labels:
|
labels:
|
||||||
- "traefik.enable=true"
|
- "traefik.enable=true"
|
||||||
- "traefik.http.routers.app.rule=Host(`mon.nxc`)"
|
- "traefik.http.routers.app.rule=Host(\`mon.nxc\`)"
|
||||||
- "traefik.http.routers.app.tls=true"
|
- "traefik.http.routers.app.tls=true"
|
||||||
environment:
|
environment:
|
||||||
- MYSQL_PASSWORD=Azerty1+
|
- MYSQL_PASSWORD=Azerty1+
|
||||||
- MYSQL_DATABASE=nextcloud
|
- MYSQL_DATABASE=nextcloud
|
||||||
- MYSQL_USER=nextcloud
|
- MYSQL_USER=nextcloud
|
||||||
- MYSQL_HOST=db
|
- MYSQL_HOST=db
|
||||||
'EOT'
|
EOT
|
||||||
|
|
||||||
docker network create proxy
|
docker network create proxy
|
||||||
docker compose -f traefik.yml up -d
|
docker compose -f traefik.yml up -d
|
||||||
|
@ -82,7 +82,8 @@ cat > ./config/dynamic.yml <<EOT
|
|||||||
http:
|
http:
|
||||||
routers:
|
routers:
|
||||||
traefik:
|
traefik:
|
||||||
rule: "Host(`traefik.docker.localhost`)"
|
# rule: "Host(`traefik.docker.localhost`)"
|
||||||
|
rule: "Host(`gitea.local`)"
|
||||||
service: "api@internal"
|
service: "api@internal"
|
||||||
tls:
|
tls:
|
||||||
domains:
|
domains:
|
||||||
@ -100,7 +101,7 @@ tls:
|
|||||||
EOT
|
EOT
|
||||||
|
|
||||||
|
|
||||||
cat > gitea.yml <<'EOT'
|
cat > gitea.yml <<-'EOT'
|
||||||
version: '2'
|
version: '2'
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
@ -110,7 +111,7 @@ volumes:
|
|||||||
networks:
|
networks:
|
||||||
proxy:
|
proxy:
|
||||||
external: true
|
external: true
|
||||||
gitea:
|
app:
|
||||||
external: false
|
external: false
|
||||||
|
|
||||||
services:
|
services:
|
||||||
@ -122,8 +123,7 @@ services:
|
|||||||
volumes:
|
volumes:
|
||||||
- db:/var/lib/mysql
|
- db:/var/lib/mysql
|
||||||
networks:
|
networks:
|
||||||
- gitea
|
- app
|
||||||
traefik-enable: false
|
|
||||||
environment:
|
environment:
|
||||||
- MYSQL_ROOT_PASSWORD=Azerty1+
|
- MYSQL_ROOT_PASSWORD=Azerty1+
|
||||||
- MYSQL_PASSWORD=Azerty1+
|
- MYSQL_PASSWORD=Azerty1+
|
||||||
@ -131,8 +131,8 @@ services:
|
|||||||
- MYSQL_USER=gitea
|
- MYSQL_USER=gitea
|
||||||
|
|
||||||
app:
|
app:
|
||||||
image: gitea
|
image: gitea/gitea
|
||||||
container_name: gitea
|
container_name: app
|
||||||
restart: always
|
restart: always
|
||||||
# ports:
|
# ports:
|
||||||
# - 8081:80
|
# - 8081:80
|
||||||
@ -143,7 +143,7 @@ services:
|
|||||||
- gitea:/var/www/html
|
- gitea:/var/www/html
|
||||||
networks:
|
networks:
|
||||||
- proxy
|
- proxy
|
||||||
- gitea
|
- app
|
||||||
labels:
|
labels:
|
||||||
- "traefik.enable=true"
|
- "traefik.enable=true"
|
||||||
- "traefik.http.routers.app.rule=Host(`gitea.local`)"
|
- "traefik.http.routers.app.rule=Host(`gitea.local`)"
|
||||||
@ -155,7 +155,7 @@ services:
|
|||||||
- MYSQL_DATABASE=gitea
|
- MYSQL_DATABASE=gitea
|
||||||
- MYSQL_USER=gitea
|
- MYSQL_USER=gitea
|
||||||
- MYSQL_HOST=db:3006
|
- MYSQL_HOST=db:3006
|
||||||
'EOT'
|
EOT
|
||||||
|
|
||||||
docker network create proxy
|
docker network create proxy
|
||||||
docker compose -f traefik.yml up -d
|
docker compose -f traefik.yml up -d
|
||||||
|
@ -1,10 +1,11 @@
|
|||||||
# GLPI
|
# GLPI
|
||||||
|
|
||||||
**glpi** installe une VM Debian 11 avec :
|
**glpi** installe une VM Debian 12 avec :
|
||||||
* **apache2**
|
* **nginx**
|
||||||
* **php** (7.4) et les paquets associés
|
* **php-fpm** (8.2) et les paquets associés
|
||||||
* **mariadb-server**
|
* **mariadb-server**
|
||||||
* **GLPI** 10.0.7
|
* **GLPI** 10.0.17
|
||||||
|
* carte réseau en NAT avec redirection du port TCP 2080
|
||||||
|
|
||||||
## Installation
|
## Installation
|
||||||
|
|
||||||
@ -14,14 +15,16 @@
|
|||||||
vagrant ssh
|
vagrant ssh
|
||||||
|
|
||||||
|
|
||||||
sudo mysql_secure_administration
|
|
||||||
|
|
||||||
### avec un navigateur :
|
### avec un navigateur :
|
||||||
|
|
||||||
se connecter à l'URL http://loclahost:2080/glpi
|
se connecter à l'URL http://localhost:2080
|
||||||
|
|
||||||
lancer l'installation de **GLPI**
|
lancer l'installation de **GLPI**
|
||||||
|
|
||||||
|
* la base **glpi** est déja créée
|
||||||
|
* mdp root mariadb : Azerty1+
|
||||||
|
|
||||||
## Utilisation
|
## Utilisation
|
||||||
|
|
||||||
**Acces SSH** : vagrant ssh
|
**Acces SSH** : vagrant ssh
|
||||||
@ -30,5 +33,5 @@ lancer l'installation de **GLPI**
|
|||||||
|
|
||||||
**Acces ssh** : ssh root@localhost -p 2022
|
**Acces ssh** : ssh root@localhost -p 2022
|
||||||
|
|
||||||
le 2023-05-04
|
le 2025-01-08
|
||||||
|
|
||||||
|
41
glpi/Vagrantfile
vendored
41
glpi/Vagrantfile
vendored
@ -12,7 +12,7 @@ Vagrant.configure("2") do |config|
|
|||||||
|
|
||||||
# Every Vagrant development environment requires a box. You can search for
|
# Every Vagrant development environment requires a box. You can search for
|
||||||
# boxes at https://vagrantcloud.com/search.
|
# boxes at https://vagrantcloud.com/search.
|
||||||
config.vm.box = "debian/bullseye64"
|
config.vm.box = "debian/bookworm64"
|
||||||
config.vm.hostname = "glpi"
|
config.vm.hostname = "glpi"
|
||||||
|
|
||||||
# Disable automatic box update checking. If you disable this, then
|
# Disable automatic box update checking. If you disable this, then
|
||||||
@ -68,24 +68,45 @@ Vagrant.configure("2") do |config|
|
|||||||
config.vm.provision "shell", inline: <<-SHELL
|
config.vm.provision "shell", inline: <<-SHELL
|
||||||
# export http_proxy=http://10.121.38.1:8080
|
# export http_proxy=http://10.121.38.1:8080
|
||||||
# export https_proxy=http://10.121.38.1:8080
|
# export https_proxy=http://10.121.38.1:8080
|
||||||
|
export GLPIVER=10.0.17
|
||||||
timedatectl set-timezone Europe/Paris
|
timedatectl set-timezone Europe/Paris
|
||||||
apt-get update
|
apt-get update
|
||||||
export DEBIAN_FRONTEND=noninteractive
|
export DEBIAN_FRONTEND=noninteractive
|
||||||
apt-get install -y vim wget curl git apache2 php php-mysql php-ldap php-gd php-intl php-xml php-curl php-zip mariadb-server
|
apt-get install -y vim wget curl git nginx php-fpm php-mysql php-ldap php-gd php-intl php-mbstring php-xml php-curl php-zip mariadb-server
|
||||||
( cd /var/www/html
|
(
|
||||||
wget https://github.com/glpi-project/glpi/releases/download/10.0.7/glpi-10.0.7.tgz
|
cd /var/www/html
|
||||||
tar xvfz glpi-10.0.7.tgz
|
wget -4 -nc https://github.com/glpi-project/glpi/releases/download/${GLPIVER}/glpi-${GLPIVER}.tgz
|
||||||
|
tar xvfz glpi-${GLPIVER}.tgz
|
||||||
chown -R root:root glpi
|
chown -R root:root glpi
|
||||||
cd glpi
|
cd glpi
|
||||||
chown -R www-data:www-data files config
|
chown -R www-data:www-data files config
|
||||||
)
|
cat > /etc/nginx/sites-enabled/glpi <<- "EOT"
|
||||||
|
server {
|
||||||
|
listen 80 default_server;
|
||||||
|
listen [::]:80 default_server;
|
||||||
|
root /var/www/html/glpi;
|
||||||
|
index index.php index.html
|
||||||
|
server_name _;
|
||||||
|
location / {
|
||||||
|
try_files $uri $uri/ =404;
|
||||||
|
}
|
||||||
|
|
||||||
# systemctl restart apache2
|
location ~ \.php$ {
|
||||||
|
include snippets/fastcgi-php.conf;
|
||||||
|
fastcgi_pass unix:/run/php/php8.2-fpm.sock;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
EOT
|
||||||
|
rm /etc/nginx/sites-enabled/default
|
||||||
|
sudo mysqladmin password "Azerty1+"
|
||||||
|
sudo mysqladmin create glpi
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
|
systemctl restart nginx php8.2-fpm
|
||||||
echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
|
echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config
|
||||||
systemctl restart ssh
|
systemctl restart ssh
|
||||||
echo 'connexion SSH avec vagrant : vagrant ssh'
|
echo 'connexion SSH avec vagrant : vagrant ssh'
|
||||||
echo 'connexion SSH : ssh root@localhost -p 2022'
|
echo 'connexion GLPI web : http://localhost:2080'
|
||||||
echo 'connexion web : http://localhost:2080'
|
|
||||||
echo 'connexion phpmyadmin : http://localhost:2080/glpi'
|
|
||||||
SHELL
|
SHELL
|
||||||
end
|
end
|
||||||
|
92
lldap/Vagrantfile
vendored
Normal file
92
lldap/Vagrantfile
vendored
Normal file
@ -0,0 +1,92 @@
|
|||||||
|
# -*- mode: ruby -*-
|
||||||
|
# vi: set ft=ruby :
|
||||||
|
|
||||||
|
# All Vagrant configuration is done below. The "2" in Vagrant.configure
|
||||||
|
# configures the configuration version (we support older styles for
|
||||||
|
# backwards compatibility). Please don't change it unless you know what
|
||||||
|
# you're doing.
|
||||||
|
Vagrant.configure("2") do |config|
|
||||||
|
# The most common configuration options are documented and commented below.
|
||||||
|
# For a complete reference, please see the online documentation at
|
||||||
|
# https://docs.vagrantup.com.
|
||||||
|
|
||||||
|
# Every Vagrant development environment requires a box. You can search for
|
||||||
|
# boxes at https://vagrantcloud.com/search.
|
||||||
|
config.vm.box = "debian/bookworm64"
|
||||||
|
config.vm.hostname = "ldap"
|
||||||
|
|
||||||
|
# Disable automatic box update checking. If you disable this, then
|
||||||
|
# boxes will only be checked for updates when the user runs
|
||||||
|
# `vagrant box outdated`. This is not recommended.
|
||||||
|
# config.vm.box_check_update = false
|
||||||
|
|
||||||
|
# Create a forwarded port mapping which allows access to a specific port
|
||||||
|
# within the machine from a port on the host machine. In the example below,
|
||||||
|
# accessing "localhost:8080" will access port 80 on the guest machine.
|
||||||
|
# NOTE: This will enable public access to the opened port
|
||||||
|
# config.vm.network "forwarded_port", guest: 80, host: 8080
|
||||||
|
|
||||||
|
# Create a forwarded port mapping which allows access to a specific port
|
||||||
|
# within the machine from a port on the host machine and only allow access
|
||||||
|
# via 127.0.0.1 to disable public access
|
||||||
|
# config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
|
||||||
|
|
||||||
|
# Create a private network, which allows host-only access to the machine
|
||||||
|
# using a specific IP.
|
||||||
|
# config.vm.network "private_network", ip: "192.168.33.10"
|
||||||
|
config.vm.network "private_network", ip: "192.168.56.10"
|
||||||
|
|
||||||
|
# Create a public network, which generally matched to bridged network.
|
||||||
|
# Bridged networks make the machine appear as another physical device on
|
||||||
|
# your network.
|
||||||
|
# config.vm.network "public_network"
|
||||||
|
|
||||||
|
# Share an additional folder to the guest VM. The first argument is
|
||||||
|
# the path on the host to the actual folder. The second argument is
|
||||||
|
# the path on the guest to mount the folder. And the optional third
|
||||||
|
# argument is a set of non-required options.
|
||||||
|
# config.vm.synced_folder "../data", "/vagrant_data"
|
||||||
|
|
||||||
|
# Disable the default share of the current code directory. Doing this
|
||||||
|
# provides improved isolation between the vagrant box and your host
|
||||||
|
# by making sure your Vagrantfile isn't accessible to the vagrant box.
|
||||||
|
# If you use this you may want to enable additional shared subfolders as
|
||||||
|
# shown above.
|
||||||
|
# config.vm.synced_folder ".", "/vagrant", disabled: true
|
||||||
|
|
||||||
|
# Provider-specific configuration so you can fine-tune various
|
||||||
|
# backing providers for Vagrant. These expose provider-specific options.
|
||||||
|
# Example for VirtualBox:
|
||||||
|
#
|
||||||
|
# config.vm.provider "virtualbox" do |vb|
|
||||||
|
# # Display the VirtualBox GUI when booting the machine
|
||||||
|
# vb.gui = true
|
||||||
|
#
|
||||||
|
# # Customize the amount of memory on the VM:
|
||||||
|
# vb.memory = "1024"
|
||||||
|
# end
|
||||||
|
#
|
||||||
|
# View the documentation for the provider you are using for more
|
||||||
|
# information on available options.
|
||||||
|
|
||||||
|
# Enable provisioning with a shell script. Additional provisioners such as
|
||||||
|
# Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
|
||||||
|
# documentation for more information about their specific syntax and use.
|
||||||
|
config.vm.provision "shell", inline: <<-SHELL
|
||||||
|
timedatectl set-timezone Europe/Paris
|
||||||
|
apt-get update
|
||||||
|
apt-get install -y vim wget curl git gpg
|
||||||
|
echo 'deb http://download.opensuse.org/repositories/home:/Masgalor:/LLDAP/Debian_12/ /' | sudo tee /etc/apt/sources.list.d/home:Masgalor:LLDAP.list
|
||||||
|
curl -fsSL https://download.opensuse.org/repositories/home:Masgalor:LLDAP/Debian_12/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_Masgalor_LLDAP.gpg > /dev/null
|
||||||
|
apt-get update
|
||||||
|
apt-get install -y lldap lldap-set-password jq
|
||||||
|
echo 'ldap_base_dn = "dc=labo,dc=lan"' >> /etc/lldap/lldap_config.toml
|
||||||
|
echo 'ldap_user_pass = "Azerty1+"' >> /etc/lldap/lldap_config.toml
|
||||||
|
systemctl enable lldap
|
||||||
|
systemctl restart lldap
|
||||||
|
git clone https://github.com/Zepmann/lldap-cli.git
|
||||||
|
sed -i 's/^lldapConfig=.*/lldapConfig=\"\/etc\/lldap\/lldap_config.toml\"/' lldap-cli/lldap-cli
|
||||||
|
cd lldap-cli && lldap-cli user add pdubois pdubois@jetable.org -p Azerty1+
|
||||||
|
cd lldap-cli && lldap-cli user add pdubois pdubois@jetable.org -p Azerty1+
|
||||||
|
SHELL
|
||||||
|
end
|
100
lldap2/Vagrantfile
vendored
Normal file
100
lldap2/Vagrantfile
vendored
Normal file
@ -0,0 +1,100 @@
|
|||||||
|
# -*- mode: ruby -*-
|
||||||
|
# vi: set ft=ruby :
|
||||||
|
|
||||||
|
# All Vagrant configuration is done below. The "2" in Vagrant.configure
|
||||||
|
# configures the configuration version (we support older styles for
|
||||||
|
# backwards compatibility). Please don't change it unless you know what
|
||||||
|
# you're doing.
|
||||||
|
Vagrant.configure("2") do |config|
|
||||||
|
# The most common configuration options are documented and commented below.
|
||||||
|
# For a complete reference, please see the online documentation at
|
||||||
|
# https://docs.vagrantup.com.
|
||||||
|
|
||||||
|
# Every Vagrant development environment requires a box. You can search for
|
||||||
|
# boxes at https://vagrantcloud.com/search.
|
||||||
|
config.vm.box = "debian/bookworm64"
|
||||||
|
config.vm.hostname = "ldap"
|
||||||
|
|
||||||
|
# Disable automatic box update checking. If you disable this, then
|
||||||
|
# boxes will only be checked for updates when the user runs
|
||||||
|
# `vagrant box outdated`. This is not recommended.
|
||||||
|
# config.vm.box_check_update = false
|
||||||
|
|
||||||
|
# Create a forwarded port mapping which allows access to a specific port
|
||||||
|
# within the machine from a port on the host machine. In the example below,
|
||||||
|
# accessing "localhost:8080" will access port 80 on the guest machine.
|
||||||
|
# NOTE: This will enable public access to the opened port
|
||||||
|
# config.vm.network "forwarded_port", guest: 80, host: 8080
|
||||||
|
|
||||||
|
# Create a forwarded port mapping which allows access to a specific port
|
||||||
|
# within the machine from a port on the host machine and only allow access
|
||||||
|
# via 127.0.0.1 to disable public access
|
||||||
|
# config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
|
||||||
|
|
||||||
|
# Create a private network, which allows host-only access to the machine
|
||||||
|
# using a specific IP.
|
||||||
|
# config.vm.network "private_network", ip: "192.168.33.10"
|
||||||
|
#config.vm.network "private_network", ip: "192.168.56.10"
|
||||||
|
|
||||||
|
# Create a public network, which generally matched to bridged network.
|
||||||
|
# Bridged networks make the machine appear as another physical device on
|
||||||
|
# your network.
|
||||||
|
config.vm.network "public_network"
|
||||||
|
|
||||||
|
# Share an additional folder to the guest VM. The first argument is
|
||||||
|
# the path on the host to the actual folder. The second argument is
|
||||||
|
# the path on the guest to mount the folder. And the optional third
|
||||||
|
# argument is a set of non-required options.
|
||||||
|
# config.vm.synced_folder "../data", "/vagrant_data"
|
||||||
|
|
||||||
|
# Disable the default share of the current code directory. Doing this
|
||||||
|
# provides improved isolation between the vagrant box and your host
|
||||||
|
# by making sure your Vagrantfile isn't accessible to the vagrant box.
|
||||||
|
# If you use this you may want to enable additional shared subfolders as
|
||||||
|
# shown above.
|
||||||
|
# config.vm.synced_folder ".", "/vagrant", disabled: true
|
||||||
|
|
||||||
|
# Provider-specific configuration so you can fine-tune various
|
||||||
|
# backing providers for Vagrant. These expose provider-specific options.
|
||||||
|
# Example for VirtualBox:
|
||||||
|
#
|
||||||
|
# config.vm.provider "virtualbox" do |vb|
|
||||||
|
# # Display the VirtualBox GUI when booting the machine
|
||||||
|
# vb.gui = true
|
||||||
|
#
|
||||||
|
# # Customize the amount of memory on the VM:
|
||||||
|
# vb.memory = "1024"
|
||||||
|
# end
|
||||||
|
#
|
||||||
|
# View the documentation for the provider you are using for more
|
||||||
|
# information on available options.
|
||||||
|
|
||||||
|
# Enable provisioning with a shell script. Additional provisioners such as
|
||||||
|
# Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
|
||||||
|
# documentation for more information about their specific syntax and use.
|
||||||
|
config.vm.provision "shell", inline: <<-SHELL
|
||||||
|
timedatectl set-timezone Europe/Paris
|
||||||
|
apt-get update
|
||||||
|
apt-get install -y vim wget curl git gpg
|
||||||
|
echo 'deb http://download.opensuse.org/repositories/home:/Masgalor:/LLDAP/Debian_12/ /' | sudo tee /etc/apt/sources.list.d/home:Masgalor:LLDAP.list
|
||||||
|
curl -fsSL https://download.opensuse.org/repositories/home:Masgalor:LLDAP/Debian_12/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_Masgalor_LLDAP.gpg > /dev/null
|
||||||
|
apt-get update
|
||||||
|
apt-get install -y lldap lldap-set-password jq
|
||||||
|
sed -i 's/^#ldap_base_dn =.*/ldap_base_dn = "dc=labo,dc=lan"/' /etc/lldap/lldap_config.toml
|
||||||
|
sed -i 's/^#ldap_user_pass =.*/ldap_user_pass= "Azerty1+"/' /etc/lldap/lldap_config.toml
|
||||||
|
systemctl enable --now lldap
|
||||||
|
[[ -d lldap-cli ]] || git clone https://github.com/Zepmann/lldap-cli.git
|
||||||
|
sed -i 's:.*lldapConfig=.*:lldapConfig="/etc/lldap/lldap_config.toml":' lldap-cli/lldap-cli
|
||||||
|
bash lldap-cli/lldap-cli group add sio2025
|
||||||
|
bash lldap-cli/lldap-cli user add pdubois pdubois@jetable.org -p Azerty1+
|
||||||
|
bash lldap-cli/lldap-cli user group add pdubois sio2025
|
||||||
|
bash lldap-cli/lldap-cli group add sio2026
|
||||||
|
bash lldap-cli/lldap-cli user add jleroy jleroy@jetable.org -p Azerty1+
|
||||||
|
bash lldap-cli/lldap-cli user group add jleroy sio2026
|
||||||
|
bash lldap-cli/lldap-cli user add ldupont ldupont@jetable.org -p Azerty1+
|
||||||
|
bash lldap-cli/lldap-cli user group add ldupont sio2026
|
||||||
|
bash lldap-cli/lldap-cli user add bind_user bind_user@jetable.org -p Azerty1+
|
||||||
|
bash lldap-cli/lldap-cli user group add bind_user lldap_strict_readonly
|
||||||
|
ip -br a
|
||||||
|
SHELL
|
||||||
|
end
|
94
netbox/Vagrantfile
vendored
Normal file
94
netbox/Vagrantfile
vendored
Normal file
@ -0,0 +1,94 @@
|
|||||||
|
# -*- mode: ruby -*-
|
||||||
|
# vi: set ft=ruby :
|
||||||
|
|
||||||
|
# All Vagrant configuration is done below. The "2" in Vagrant.configure
|
||||||
|
# configures the configuration version (we support older styles for
|
||||||
|
# backwards compatibility). Please don't change it unless you know what
|
||||||
|
# you're doing.
|
||||||
|
Vagrant.configure("2") do |config|
|
||||||
|
# The most common configuration options are documented and commented below.
|
||||||
|
# For a complete reference, please see the online documentation at
|
||||||
|
# https://docs.vagrantup.com.
|
||||||
|
|
||||||
|
# Every Vagrant development environment requires a box. You can search for
|
||||||
|
# boxes at https://vagrantcloud.com/search.
|
||||||
|
config.vm.box = "debian/bookworm64"
|
||||||
|
config.vm.hostname = "netbox"
|
||||||
|
|
||||||
|
# Disable automatic box update checking. If you disable this, then
|
||||||
|
# boxes will only be checked for updates when the user runs
|
||||||
|
# `vagrant box outdated`. This is not recommended.
|
||||||
|
# config.vm.box_check_update = false
|
||||||
|
|
||||||
|
# Create a forwarded port mapping which allows access to a specific port
|
||||||
|
# within the machine from a port on the host machine. In the example below,
|
||||||
|
# accessing "localhost:8080" will access port 80 on the guest machine.
|
||||||
|
# NOTE: This will enable public access to the opened port
|
||||||
|
# config.vm.network "forwarded_port", guest: 80, host: 8080
|
||||||
|
|
||||||
|
# Create a forwarded port mapping which allows access to a specific port
|
||||||
|
# within the machine from a port on the host machine and only allow access
|
||||||
|
# via 127.0.0.1 to disable public access
|
||||||
|
# config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
|
||||||
|
|
||||||
|
# Create a private network, which allows host-only access to the machine
|
||||||
|
# using a specific IP.
|
||||||
|
# config.vm.network "private_network", ip: "192.168.33.10"
|
||||||
|
|
||||||
|
# Create a public network, which generally matched to bridged network.
|
||||||
|
# Bridged networks make the machine appear as another physical device on
|
||||||
|
# your network.
|
||||||
|
config.vm.network "public_network"
|
||||||
|
|
||||||
|
# Share an additional folder to the guest VM. The first argument is
|
||||||
|
# the path on the host to the actual folder. The second argument is
|
||||||
|
# the path on the guest to mount the folder. And the optional third
|
||||||
|
# argument is a set of non-required options.
|
||||||
|
# config.vm.synced_folder "../data", "/vagrant_data"
|
||||||
|
|
||||||
|
# Disable the default share of the current code directory. Doing this
|
||||||
|
# provides improved isolation between the vagrant box and your host
|
||||||
|
# by making sure your Vagrantfile isn't accessible to the vagrant box.
|
||||||
|
# If you use this you may want to enable additional shared subfolders as
|
||||||
|
# shown above.
|
||||||
|
# config.vm.synced_folder ".", "/vagrant", disabled: true
|
||||||
|
|
||||||
|
# Provider-specific configuration so you can fine-tune various
|
||||||
|
# backing providers for Vagrant. These expose provider-specific options.
|
||||||
|
# Example for VirtualBox:
|
||||||
|
#
|
||||||
|
config.vm.provider "virtualbox" do |vb|
|
||||||
|
# # Display the VirtualBox GUI when booting the machine
|
||||||
|
# vb.gui = true
|
||||||
|
#
|
||||||
|
# # Customize the amount of memory on the VM:
|
||||||
|
vb.memory = "2048"
|
||||||
|
end
|
||||||
|
#
|
||||||
|
# View the documentation for the provider you are using for more
|
||||||
|
# information on available options.
|
||||||
|
|
||||||
|
# Enable provisioning with a shell script. Additional provisioners such as
|
||||||
|
# Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
|
||||||
|
# documentation for more information about their specific syntax and use.
|
||||||
|
config.vm.provision "shell", inline: <<-SHELL
|
||||||
|
timedatectl set-timezone Europe/Paris
|
||||||
|
apt-get update
|
||||||
|
apt-get install -y vim wget curl git
|
||||||
|
if ! which docker ; then
|
||||||
|
curl -s -o getdocker.sh https://get.docker.com
|
||||||
|
bash getdocker.sh
|
||||||
|
gpasswd -a vagrant docker
|
||||||
|
fi
|
||||||
|
git clone -b release https://github.com/netbox-community/netbox-docker.git
|
||||||
|
cd netbox-docker
|
||||||
|
cat > docker-compose.override.yml <<EOT
|
||||||
|
services:
|
||||||
|
netbox:
|
||||||
|
ports:
|
||||||
|
- "8000:8080"
|
||||||
|
EOT
|
||||||
|
docker compose pull
|
||||||
|
docker compose up -d
|
||||||
|
SHELL
|
||||||
|
end
|
117
zabbix/Vagrantfile
vendored
Normal file
117
zabbix/Vagrantfile
vendored
Normal file
@ -0,0 +1,117 @@
|
|||||||
|
# -*- mode: ruby -*-
|
||||||
|
# vi: set ft=ruby :
|
||||||
|
|
||||||
|
# All Vagrant configuration is done below. The "2" in Vagrant.configure
|
||||||
|
# configures the configuration version (we support older styles for
|
||||||
|
# backwards compatibility). Please don't change it unless you know what
|
||||||
|
# you're doing.
|
||||||
|
Vagrant.configure("2") do |config|
|
||||||
|
# The most common configuration options are documented and commented below.
|
||||||
|
# For a complete reference, please see the online documentation at
|
||||||
|
# https://docs.vagrantup.com.
|
||||||
|
|
||||||
|
# Every Vagrant development environment requires a box. You can search for
|
||||||
|
# boxes at https://vagrantcloud.com/search.
|
||||||
|
config.vm.define "zabbix7" do |zabbix7|
|
||||||
|
zabbix7.vm.box = "debian/bookworm64"
|
||||||
|
zabbix7.vm.hostname = "zabbix7"
|
||||||
|
|
||||||
|
# Disable automatic box update checking. If you disable this, then
|
||||||
|
# boxes will only be checked for updates when the user runs
|
||||||
|
# `vagrant box outdated`. This is not recommended.
|
||||||
|
# config.vm.box_check_update = false
|
||||||
|
|
||||||
|
# Create a forwarded port mapping which allows access to a specific port
|
||||||
|
# within the machine from a port on the host machine. In the example below,
|
||||||
|
# accessing "localhost:8080" will access port 80 on the guest machine.
|
||||||
|
# NOTE: This will enable public access to the opened port
|
||||||
|
# config.vm.network "forwarded_port", guest: 80, host: 8080
|
||||||
|
|
||||||
|
# Create a forwarded port mapping which allows access to a specific port
|
||||||
|
# within the machine from a port on the host machine and only allow access
|
||||||
|
# via 127.0.0.1 to disable public access
|
||||||
|
# config.vm.network "forwarded_port", guest: 80, host: 8080, host_ip: "127.0.0.1"
|
||||||
|
|
||||||
|
# Create a private network, which allows host-only access to the machine
|
||||||
|
# using a specific IP.
|
||||||
|
# config.vm.network "private_network", ip: "192.168.33.10"
|
||||||
|
zabbix7.vm.network "private_network", ip: "192.168.56.10"
|
||||||
|
|
||||||
|
# Create a public network, which generally matched to bridged network.
|
||||||
|
# Bridged networks make the machine appear as another physical device on
|
||||||
|
# your network.
|
||||||
|
# config.vm.network "public_network"
|
||||||
|
|
||||||
|
# Share an additional folder to the guest VM. The first argument is
|
||||||
|
# the path on the host to the actual folder. The second argument is
|
||||||
|
# the path on the guest to mount the folder. And the optional third
|
||||||
|
# argument is a set of non-required options.
|
||||||
|
# config.vm.synced_folder "../data", "/vagrant_data"
|
||||||
|
|
||||||
|
# Disable the default share of the current code directory. Doing this
|
||||||
|
# provides improved isolation between the vagrant box and your host
|
||||||
|
# by making sure your Vagrantfile isn't accessible to the vagrant box.
|
||||||
|
# If you use this you may want to enable additional shared subfolders as
|
||||||
|
# shown above.
|
||||||
|
# config.vm.synced_folder ".", "/vagrant", disabled: true
|
||||||
|
|
||||||
|
# Provider-specific configuration so you can fine-tune various
|
||||||
|
# backing providers for Vagrant. These expose provider-specific options.
|
||||||
|
# Example for VirtualBox:
|
||||||
|
#
|
||||||
|
zabbix7.vm.provider "virtualbox" do |vb|
|
||||||
|
# # Display the VirtualBox GUI when booting the machine
|
||||||
|
# vb.gui = true
|
||||||
|
#
|
||||||
|
# # Customize the amount of memory on the VM:
|
||||||
|
vb.memory = "1024"
|
||||||
|
end
|
||||||
|
#
|
||||||
|
# View the documentation for the provider you are using for more
|
||||||
|
# information on available options.
|
||||||
|
|
||||||
|
# Enable provisioning with a shell script. Additional provisioners such as
|
||||||
|
# Ansible, Chef, Docker, Puppet and Salt are also available. Please see the
|
||||||
|
# documentation for more information about their specific syntax and use.
|
||||||
|
zabbix7.vm.provision "shell", inline: <<-SHELL
|
||||||
|
timedatectl set-timezone Europe/Paris
|
||||||
|
apt-get update
|
||||||
|
apt-get install -y wget curl vim
|
||||||
|
wget https://repo.zabbix.com/zabbix/7.0/debian/pool/main/z/zabbix-release/zabbix-release_7.0-2+debian12_all.deb
|
||||||
|
dpkg -i zabbix-release_7.0-2+debian12_all.deb
|
||||||
|
apt-get update
|
||||||
|
apt-get install -y apache2 mariadb-server
|
||||||
|
apt-get install -y zabbix-server-mysql zabbix-frontend-php zabbix-apache-conf zabbix-sql-scripts zabbix-agent
|
||||||
|
echo 'create database zabbix character set utf8mb4 collate utf8mb4_bin;' | mysql -u root
|
||||||
|
echo "create user zabbix@localhost identified by 'password';" | mysql -u root
|
||||||
|
echo 'grant all privileges on zabbix.* to zabbix@localhost;' | mysql -u root
|
||||||
|
echo 'set global log_bin_trust_function_creators = 1;' | mysql -u root
|
||||||
|
zcat /usr/share/zabbix-sql-scripts/mysql/server.sql.gz | mysql --default-character-set=utf8mb4 -u zabbix -ppassword zabbix
|
||||||
|
echo 'set global log_bin_trust_function_creators = 0;' | mysql -u root
|
||||||
|
sed -i 's/# DBPassword=/DBPassword=password/' /etc/zabbix/zabbix_server.conf
|
||||||
|
systemctl restart zabbix-server zabbix-agent apache2
|
||||||
|
systemctl enable zabbix-server zabbix-agent apache2
|
||||||
|
localectl set-locale LANG=en_US.UTF-8
|
||||||
|
systemctl restart zabbix-server zabbix-agent apache2
|
||||||
|
SHELL
|
||||||
|
end
|
||||||
|
|
||||||
|
config.vm.define "web1" do |srv| #VM No'1
|
||||||
|
srv.vm.box = "debian/bookworm64" #Setting machine type
|
||||||
|
srv.vm.hostname = "web1" #Setting machine type
|
||||||
|
srv.vm.network "private_network", ip: "192.168.56.11"
|
||||||
|
srv.vm.provision "shell", inline: <<-SHELL
|
||||||
|
timedatectl set-timezone Europe/Paris
|
||||||
|
apt-get update
|
||||||
|
apt-get install -y wget curl vim apache2
|
||||||
|
wget https://repo.zabbix.com/zabbix/7.0/debian/pool/main/z/zabbix-release/zabbix-release_7.0-2+debian12_all.deb
|
||||||
|
dpkg -i zabbix-release_7.0-2+debian12_all.deb
|
||||||
|
apt-get update
|
||||||
|
apt install -y zabbix-agent2
|
||||||
|
echo "Server=192.168.56.10" >> /etc/zabbix/zabbix_agent2.conf
|
||||||
|
echo "ServerActive=192.168.56.10" >> /etc/zabbix/zabbix_agent2.conf
|
||||||
|
echo "Hostname=web1" >> /etc/zabbix/zabbix_agent2.conf
|
||||||
|
systemctl restart zabbix-agent2
|
||||||
|
SHELL
|
||||||
|
end
|
||||||
|
end
|
Reference in New Issue
Block a user