mirror of
https://github.com/trailofbits/algo
synced 2024-11-18 09:25:38 +00:00
25513cf925
* Refactoring, Linting and additional tests * Vultr: Undefined variable and deprecation notes fix * Travis-CI enable linters * Azure: Update python requirements * Update main.yml * Update install.sh * Add missing roles to ansible-lint * Linting for skipped roles * add .ansible-lint config
61 lines
1.8 KiB
YAML
61 lines
1.8 KiB
YAML
---
|
|
|
|
- name: Setup the config files from our templates
|
|
template:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ config_prefix|default('/') }}etc/{{ item.dest }}"
|
|
owner: "{{ item.owner }}"
|
|
group: "{{ item.group }}"
|
|
mode: "{{ item.mode }}"
|
|
with_items:
|
|
- src: strongswan.conf.j2
|
|
dest: "strongswan.conf"
|
|
owner: root
|
|
group: "{{ root_group|default('root') }}"
|
|
mode: "0644"
|
|
- src: ipsec.conf.j2
|
|
dest: "ipsec.conf"
|
|
owner: root
|
|
group: "{{ root_group|default('root') }}"
|
|
mode: "0644"
|
|
- src: ipsec.secrets.j2
|
|
dest: "ipsec.secrets"
|
|
owner: strongswan
|
|
group: "{{ root_group|default('root') }}"
|
|
mode: "0600"
|
|
- src: charon.conf.j2
|
|
dest: "strongswan.d/charon.conf"
|
|
owner: root
|
|
group: "{{ root_group|default('root') }}"
|
|
mode: "0644"
|
|
notify:
|
|
- restart strongswan
|
|
|
|
- name: Get loaded plugins
|
|
shell: |
|
|
set -o pipefail
|
|
find {{ config_prefix|default('/') }}etc/strongswan.d/charon/ -type f -name '*.conf' -exec basename {} \; |
|
|
cut -f1 -d.
|
|
changed_when: false
|
|
args:
|
|
executable: bash
|
|
register: strongswan_plugins
|
|
|
|
- name: Disable unneeded plugins
|
|
lineinfile:
|
|
dest: "{{ config_prefix|default('/') }}etc/strongswan.d/charon/{{ item }}.conf"
|
|
regexp: '.*load.*'
|
|
line: 'load = no'
|
|
state: present
|
|
notify:
|
|
- restart strongswan
|
|
when: item not in strongswan_enabled_plugins and item not in strongswan_additional_plugins
|
|
with_items: "{{ strongswan_plugins.stdout_lines }}"
|
|
|
|
- name: Ensure that required plugins are enabled
|
|
lineinfile: dest="{{ config_prefix|default('/') }}etc/strongswan.d/charon/{{ item }}.conf" regexp='.*load.*' line='load = yes' state=present
|
|
notify:
|
|
- restart strongswan
|
|
when: item in strongswan_enabled_plugins or item in strongswan_additional_plugins
|
|
with_items: "{{ strongswan_plugins.stdout_lines }}"
|