maj mkvm

roles/lb-front-ssl/tasks/main.yml

@@ -10,6 +10,21 @@
     csr_path: /etc/haproxy/crt/csr/haproxy.csr
     provider: selfsigned
 
+- name: parametre global
+  blockinfile:
+    path: /etc/haproxy/haproxy.cfg
+    block: |
+      global
+        log /dev/log    local0
+        log /dev/log    local1 notice
+        chroot /var/lib/haproxy
+        stats socket /run/haproxy/admin.sock mode 660 level admin
+        stats timeout 30s
+        user haproxy
+        group haproxy
+        daemon
+        ssl-server-verify none
+
 - name: parametre backend et fontend
   blockinfile:
     path: /etc/haproxy/haproxy.cfg

s-lb.yml

@@ -6,6 +6,7 @@
      - base
      - goss
      - lb-front
+       #- lb-front-ssl
        #- zabbix-cli
      - ssh-cli
      - post

scripts/mkvm

@@ -2,8 +2,8 @@
 
 mkvmrelease="v1.3.3"
 
-ovarelease="2023c"
-ovafogrelease="2024a"
+ovarelease="2024a"
+ovafogrelease="2024b"
 #ovafile="$HOME/Téléchargements/debian-bullseye-gsb-${ovarelease}.ova"
 ovafile="$HOME/Téléchargements/debian-bookworm-gsb-${ovarelease}.ova"
 ovafilefog="$HOME/Téléchargements/debian-bullseye-gsb-${ovafogrelease}.ova"

scripts/mkvm.ps1

@@ -18,11 +18,13 @@ $vmMem = @{
   "s-infra" = "768"
   "s-backup" = "768"
   "s-elk" = "3072"
+  "s-awx" = "4096"
+  "s-peertube" = "4096"
 }
 
 $vmCpus = @{
-  "s-awx" = "4096"
-  "s-peertube" = "4096"
+  "s-awx" = "2"
+  "s-peertube" = "2"
 }
 #FONCTIONS