debian@ap-33ans
This commit is contained in:
0
ansible/apdb.yml
Normal file
0
ansible/apdb.yml
Normal file
0
ansible/apdbdump.yml
Normal file
0
ansible/apdbdump.yml
Normal file
21
ansible/compose.yml
Normal file
21
ansible/compose.yml
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
services:
|
||||||
|
payara:
|
||||||
|
image: payara/server-full:6.2025.9-jdk17
|
||||||
|
container_name: payara
|
||||||
|
ports:
|
||||||
|
- "8080:8080"
|
||||||
|
- "4848:4848"
|
||||||
|
- "8181:8181"
|
||||||
|
env_file:
|
||||||
|
- "variables.env"
|
||||||
|
|
||||||
|
db:
|
||||||
|
image: mariadb
|
||||||
|
container_name: db
|
||||||
|
ports:
|
||||||
|
- "3336:3306"
|
||||||
|
env_file:
|
||||||
|
- "variables.env"
|
||||||
|
volumes:
|
||||||
|
- ./data/db_data:/var/lib/mysql
|
||||||
|
- ./init:/docker-entrypoint-initdb.d
|
||||||
2
ansible/hosts.ini
Normal file
2
ansible/hosts.ini
Normal file
@@ -0,0 +1,2 @@
|
|||||||
|
[ap33-pt]
|
||||||
|
ap33-pt ansible_host=172.16.0.125
|
||||||
32
ansible/payara.yml
Normal file
32
ansible/payara.yml
Normal file
@@ -0,0 +1,32 @@
|
|||||||
|
---
|
||||||
|
- name:
|
||||||
|
hosts: ap33-pt
|
||||||
|
become: yes
|
||||||
|
|
||||||
|
tasks:
|
||||||
|
- name: download docker
|
||||||
|
ansible.builtin.get_url:
|
||||||
|
url: http://depl.sio.lan/store/get-docker.sh
|
||||||
|
dest: /tmp
|
||||||
|
|
||||||
|
- name: execution script get docker
|
||||||
|
ansible.builtin.shell:
|
||||||
|
cmd: export https_proxy=http://10.121.38.1:8080 ; bash /tmp/get-docker.sh
|
||||||
|
|
||||||
|
- name: creation dossier payara
|
||||||
|
ansible.builtin.file:
|
||||||
|
path: /home/debian/payara
|
||||||
|
state: directory
|
||||||
|
mode: '0755'
|
||||||
|
become: no
|
||||||
|
|
||||||
|
- name: importation
|
||||||
|
ansible.builtin.copy:
|
||||||
|
src: ./compose.yml
|
||||||
|
dest: ~/paraya/compose.yml
|
||||||
|
mode: '0755'
|
||||||
|
become: no
|
||||||
|
|
||||||
|
- name: docker pull
|
||||||
|
ansible.builtin.script:
|
||||||
|
cmd: cd ~/payara ; docker compose pull
|
||||||
0
vpn/endpoint-a.key
Normal file
0
vpn/endpoint-a.key
Normal file
52
vpn/mkwgconf.sh
Normal file
52
vpn/mkwgconf.sh
Normal file
@@ -0,0 +1,52 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
set -u
|
||||||
|
set -e
|
||||||
|
|
||||||
|
AddressAwg=10.0.0.1/32 # Adresse VPN Wireguard extremite A
|
||||||
|
EndpointA=172.16.0.121 # Adresse extremite A
|
||||||
|
PortA=51820 # Port ecoute extremite A
|
||||||
|
AddressBwg=10.0.0.2/32 # Adresse VPN Wireguard extremite B
|
||||||
|
EndpointB=172.16.0.120 # Adresse extremite B
|
||||||
|
PortB=51820 # Port ecoute extremite B
|
||||||
|
|
||||||
|
umask 077 ;
|
||||||
|
wg genkey > endpoint-a.key
|
||||||
|
wg pubkey < endpoint-a.key > endpoint-a.pub
|
||||||
|
|
||||||
|
wg genkey > endpoint-b.key
|
||||||
|
wg pubkey < endpoint-b.key > endpoint-b.pub
|
||||||
|
|
||||||
|
PKA=$(cat endpoint-a.key)
|
||||||
|
pKA=$(cat endpoint-a.pub)
|
||||||
|
PKB=$(cat endpoint-b.key)
|
||||||
|
pKB=$(cat endpoint-b.pub)
|
||||||
|
|
||||||
|
cat <<FINI > wg0-a.conf
|
||||||
|
# local settings for Endpoint A
|
||||||
|
[Interface]
|
||||||
|
PrivateKey = $PKA
|
||||||
|
Address = $AddressAwg
|
||||||
|
ListenPort = $PortA
|
||||||
|
|
||||||
|
# remote settings for Endpoint B
|
||||||
|
[Peer]
|
||||||
|
PublicKey = $pKB
|
||||||
|
Endpoint = ${EndpointB}:$PortB
|
||||||
|
AllowedIPs = $AddressBwg
|
||||||
|
FINI
|
||||||
|
|
||||||
|
|
||||||
|
cat <<FINI > wg0-b.conf
|
||||||
|
# local settings for Endpoint B
|
||||||
|
[Interface]
|
||||||
|
PrivateKey = $PKB
|
||||||
|
Address = $AddressBwg
|
||||||
|
ListenPort = $PortB
|
||||||
|
|
||||||
|
# remote settings for Endpoint A
|
||||||
|
[Peer]
|
||||||
|
PublicKey = $pKA
|
||||||
|
Endpoint = ${EndpointA}:$PortA
|
||||||
|
AllowedIPs = $AddressAwg
|
||||||
|
FINI
|
||||||
|
|
||||||
22
vpn/wp.yml
Normal file
22
vpn/wp.yml
Normal file
@@ -0,0 +1,22 @@
|
|||||||
|
---
|
||||||
|
- name:
|
||||||
|
hosts: ap33-test
|
||||||
|
become: yes
|
||||||
|
|
||||||
|
tasks:
|
||||||
|
|
||||||
|
- name: Installer Wireguard et Wireguardtools
|
||||||
|
apt:
|
||||||
|
- wireguard
|
||||||
|
- wireguard-tools
|
||||||
|
state: present
|
||||||
|
update_cache: yes
|
||||||
|
|
||||||
|
- name: Copie fichier mkwgconfsh
|
||||||
|
ansible.builtin.copy:
|
||||||
|
src: mkwgconf.sh
|
||||||
|
dest: /tmp/
|
||||||
|
|
||||||
|
- name: Lancement du script
|
||||||
|
ansible.builtin.shell:
|
||||||
|
cmd: bash /tmp/mkwgconf.sh
|
||||||
Reference in New Issue
Block a user