Merge branch 'add-CI' into 'master'

Add CI pipeline

See merge request aurore/ansible!6

.gitlab-ci.yml

@@ -0,0 +1,6 @@
+---
+image: quay.io/ansible/molecule:2.19
+
+yamllint:
+  script: yamllint -c .yamllint.yml .
+...

.yamllint.yml

@@ -0,0 +1,7 @@
+---
+extends: default
+
+rules:
+  line-length:
+    level: warning
+...

README.md

@@ -47,4 +47,3 @@ d'Ansible.
 ```
 ansible -i hosts ldap-replica-fleming1.adm.auro.re -m setup --ask-vault-pass
 ```
-

base.yml

@@ -3,4 +3,3 @@
 - hosts: all
   roles:
    - baseconfig
-

dokuwiki.yml

@@ -4,4 +4,3 @@
 - hosts: horus-wikitest
   roles:
    - dokuwiki
-

etherpad.yml

@@ -4,4 +4,3 @@
   roles:
    - debian-backports
    - etherpad
-

group_vars/all/vars.yml

@@ -30,4 +30,3 @@ ssh_pub_keys: "{{ vault_ssh_pub_keys }}"
 
 # Monitoring
 monitoring_mail: 'monitoring.aurore@lists.crans.org'
-

group_vars/fleming/ldap_local_replica.yml

@@ -1,5 +1,4 @@
 ---
 ldap_local_replica_uri:
-- 'ldap://ldap-replica-fleming1.adm.auro.re'
-- 'ldap://ldap-replica-fleming2.adm.auro.re'
-
+  - 'ldap://ldap-replica-fleming1.adm.auro.re'
+  - 'ldap://ldap-replica-fleming2.adm.auro.re'

group_vars/ovh-testing/ldap_local_replica.yml

@@ -1,4 +1,3 @@
 ---
 ldap_local_replica_uri:
-- 'ldap://10.128.0.100'
-
+  - 'ldap://10.128.0.100'

hosts

@@ -61,4 +61,3 @@ fleming-pve
 # every LDAP replica
 [ldap-replica:children]
 fleming-vm-ldap-replica
-

ldap.yml

@@ -6,7 +6,6 @@
 
 # Clone LDAP on local geographic location
 # DON'T DO THIS AS IT RECREATES THE REPLICA
-#- hosts: ldap-replica
-#  roles:
-#    - ldap-replica
-
+# - hosts: ldap-replica
+#   roles:
+#     - ldap-replica

matrix.yml

@@ -12,4 +12,3 @@
 - hosts: riot.adm.auro.re
   roles:
     - matrix-riot
-

nginx-reverse-proxy.yml

@@ -3,36 +3,35 @@
 - hosts: proxy.adm.auro.re
   vars:
     reversed_proxy_subdomains:
-    - name: re2o
-      from: re2o.auro.re
-      to: 10.128.0.10
-    - name: intranet
-      from: intranet.auro.re
-      to: 10.128.0.10
-    - name: pad
-      from: pad.auro.re
-      to: 10.128.0.54:9001
-    - name: phabricator
-      from: phabricator.auro.re
-      to: 10.128.0.50
-    - name: wiki
-      from: wiki.auro.re
-      to: 10.128.0.51
-    - name: www
-      from: www.auro.re
-      to: 10.128.0.52
-    - name: main
-      from: auro.re
-      to: 10.128.0.52
-    - name: re2o-test
-      from: re2o-test.auro.re
-      to: 10.128.0.100
-    - name: riot
-      from: riot.auro.re
-      to: riot.adm.auro.re
-    - name: codimd
-      from: codimd.auro.re
-      to: codimd.adm.auro.re:8080
+      - name: re2o
+        from: re2o.auro.re
+        to: 10.128.0.10
+      - name: intranet
+        from: intranet.auro.re
+        to: 10.128.0.10
+      - name: pad
+        from: pad.auro.re
+        to: 10.128.0.54:9001
+      - name: phabricator
+        from: phabricator.auro.re
+        to: 10.128.0.50
+      - name: wiki
+        from: wiki.auro.re
+        to: 10.128.0.51
+      - name: www
+        from: www.auro.re
+        to: 10.128.0.52
+      - name: main
+        from: auro.re
+        to: 10.128.0.52
+      - name: re2o-test
+        from: re2o-test.auro.re
+        to: 10.128.0.100
+      - name: riot
+        from: riot.auro.re
+        to: riot.adm.auro.re
+      - name: codimd
+        from: codimd.auro.re
+        to: codimd.adm.auro.re:8080
   roles:
-   - nginx-reverse-proxy
-
+    - nginx-reverse-proxy

roles/baseconfig/tasks/apt-listchanges.yml

@@ -17,4 +17,3 @@
     confirm: 'confirm=true'
     email_address: "email_address={{ monitoring_mail }}"
     which: 'which=both'
-

roles/baseconfig/tasks/main.yml

@@ -8,17 +8,17 @@
     update_cache: yes
   vars:
     packages:
-    - bash-completion   # for bash users
-    - zsh               # alternative shell
-    - sudo              # to gain root access
-    - git               # code versioning
-    - nano              # basic text editor
-    - vim               # like nano but more powerful and complex
-    - htop              # better than top
-    - less              # i like cats
-    - tree              # create a graphical tree of files
-    - ipython           # better Python shell
-    - acl               # for Ansible become support
+      - bash-completion   # for bash users
+      - zsh               # alternative shell
+      - sudo              # to gain root access
+      - git               # code versioning
+      - nano              # basic text editor
+      - vim               # like nano but more powerful and complex
+      - htop              # better than top
+      - less              # i like cats
+      - tree              # create a graphical tree of files
+      - ipython           # better Python shell
+      - acl               # for Ansible become support
 
 # Pimp my server
 - name: Customize motd
@@ -29,7 +29,9 @@
 
 # Configure APT mirrors on Debian Stretch
 - name: Configure APT mirrors
-  when: ansible_distribution == 'Debian' and ansible_distribution_release == 'stretch'
+  when:
+    - ansible_distribution == 'Debian'
+    - ansible_distribution_release == 'stretch'
   template:
     src: 'apt/sources.list.j2'
     dest: '/etc/apt/sources.list'
@@ -55,4 +57,3 @@
   with_dict:
     dot_zshrc: .zshrc
     dot_zshrc.local: .zshrc.local
-

roles/baseconfig/tasks/molly-guard.yml

@@ -13,4 +13,3 @@
     dest: /etc/molly-guard/rc
     regexp: '^#*\s*ALWAYS_QUERY_HOSTNAME.*$'
     line: 'ALWAYS_QUERY_HOSTNAME=true'
-

roles/baseconfig/templates/apt/sources.list.j2

@@ -28,4 +28,3 @@ deb {{ debian_security_mirror }} {{ ansible_distribution_release }}/updates {{ d
 # Backports
 deb {{ debian_security_mirror }} {{ ansible_distribution_release }}-backports {{ debian_components }}
 {% endif %}
-

roles/codimd/handlers/main.yml

@@ -10,4 +10,3 @@
 # Reload systemd daemons when a service file changes
 - name: Reload systemd daemons
   command: systemctl daemon-reload
-

roles/codimd/tasks/0_apt_dependencies.yml

@@ -1,7 +1,9 @@
 ---
 # For NodeJS package
 - name: Configure NodeJS pin
-  when: ansible_distribution == 'Debian' and ansible_distribution_release == 'stretch'
+  when:
+    - ansible_distribution == 'Debian'
+    - ansible_distribution_release == 'stretch'
   template:
     src: apt/nodejs.j2
     dest: /etc/apt/preferences.d/nodejs

roles/codimd/tasks/main.yml

@@ -7,14 +7,14 @@
 
 # Download CodiMD
 # TODO : temporally disabled until 1.3.0 is out (because of uws bug)
-#- name: Clone CodiMD project
-#  git:
-#    repo: https://github.com/hackmdio/codimd.git
-#    dest: /var/local/codimd/codimd
-#    version: 1.2.1
-#  become: yes
-#  become_user: codimd
-#  notify: Build front-end for CodiMD
+# - name: Clone CodiMD project
+#   git:
+#     repo: https://github.com/hackmdio/codimd.git
+#     dest: /var/local/codimd/codimd
+#     version: 1.2.1
+#   become: yes
+#   become_user: codimd
+#   notify: Build front-end for CodiMD
 
 # Setup dependencies and configs
 - name: Install CodiMD depedencies
@@ -66,4 +66,3 @@
     name: codimd
     state: started
     enabled: true
-

roles/codimd/templates/apt/nodejs.j2

@@ -3,4 +3,3 @@
 Package: node* libuv1*
 Pin: release a=stretch-backports
 Pin-Priority: 600
-

roles/codimd/templates/systemd/codimd.service.j2

@@ -16,4 +16,3 @@ Restart=always
 
 [Install]
 WantedBy=multi-user.target
-

roles/debian-backports/tasks/main.yml

@@ -5,4 +5,3 @@
     src: backports.list.j2
     dest: /etc/apt/sources.list.d/backports.list
     mode: 0644
-

roles/debian-backports/templates/backports.list.j2

@@ -6,4 +6,3 @@
 {% endif %}
 
 deb {{ debian_mirror }} {{ ansible_distribution_release }}-backports main
-

roles/dokuwiki/tasks/main.yml

@@ -1,7 +1,9 @@
 ---
 # For DokuWiki package
 - name: Configure Debian Buster mirrors
-  when: ansible_distribution == 'Debian' and ansible_distribution_release == 'stretch'
+  when:
+    - ansible_distribution == 'Debian'
+    - ansible_distribution_release == 'stretch'
   template:
     src: apt/buster.list.j2
     dest: /etc/apt/sources.list.d/buster.list
@@ -9,7 +11,9 @@
 
 # For DokuWiki package
 - name: Configure DokuWiki pin
-  when: ansible_distribution == 'Debian' and ansible_distribution_release == 'stretch'
+  when:
+    - ansible_distribution == 'Debian'
+    - ansible_distribution_release == 'stretch'
   template:
     src: apt/dokuwiki.j2
     dest: /etc/apt/preferences.d/dokuwiki
@@ -20,4 +24,3 @@
   apt:
     name: dokuwiki
     update_cache: yes
-

roles/dokuwiki/templates/apt/buster.list.j2

@@ -7,4 +7,3 @@
 
 deb {{ debian_mirror }} buster main
 deb-src {{ debian_mirror }} buster main
-

roles/dokuwiki/templates/apt/dokuwiki.j2

@@ -7,4 +7,3 @@ Pin-Priority: 990
 Package: dokuwiki
 Pin: release n=buster
 Pin-Priority: 990
-

roles/etherpad/handlers/main.yml

@@ -2,4 +2,3 @@
 # Reload systemd daemons when a service file changes
 - name: Reload systemd daemons
   command: systemctl daemon-reload
-

roles/etherpad/tasks/0_apt_dependencies.yml

@@ -1,7 +1,9 @@
 ---
 # For NodeJS package
 - name: Configure NodeJS pin
-  when: ansible_distribution == 'Debian' and ansible_distribution_release == 'stretch'
+  when:
+    - ansible_distribution == 'Debian'
+    - ansible_distribution_release == 'stretch'
   template:
     src: apt/nodejs.j2
     dest: /etc/apt/preferences.d/nodejs
@@ -19,4 +21,3 @@
     - git
     - nodejs
     - npm
-

roles/etherpad/tasks/1_user_group.yml

@@ -24,4 +24,3 @@
     owner: etherpad
     group: etherpad
     mode: 0750
-

roles/etherpad/tasks/main.yml

@@ -57,4 +57,3 @@
 # TODO-list
 #  * Configure admin user, logs
 # Plugins : https://framacloud.org/fr/cultiver-son-jardin/etherpad.html#concernant-framapad
-

roles/etherpad/templates/apt/nodejs.j2

@@ -3,4 +3,3 @@
 Package: node* libuv1*
 Pin: release a=stretch-backports
 Pin-Priority: 600
-

roles/etherpad/templates/systemd/etherpad-lite.service.j2

@@ -15,4 +15,3 @@ Restart=always
 
 [Install]
 WantedBy=multi-user.target
-

roles/ldap-client/handlers/main.yml

@@ -14,4 +14,3 @@
     state: restarted
   ignore_errors: true  # Sometimes service do not exist
   listen: Restart nslcd service
-

roles/ldap-client/tasks/0_install_ldap.yml

@@ -12,11 +12,11 @@
 
 # Reduce LDAP load
 # For the moment it is broken on Stretch when using PHP7.3
-#- name: Install LDAP cache package
-#  apt:
-#    name: nscd
-#    state: present
-#    update_cache: yes
+# - name: Install LDAP cache package
+#   apt:
+#     name: nscd
+#     state: present
+#     update_cache: yes
 
 # Configure /etc/nslcd.conf
 - name: Configure nslcd LDAP credentials
@@ -33,9 +33,8 @@
     regexp: "^{{ item.key }}:"
     line: "{{ item.value }}"
   with_dict:
-    passwd:  'passwd:         files ldap'
-    group:   'group:          files ldap'
-    shadow:  'shadow:         files ldap'
+    passwd: 'passwd:         files ldap'
+    group: 'group:          files ldap'
+    shadow: 'shadow:         files ldap'
     sudoers: 'sudoers:        files ldap'
   notify: Restart nslcd service
-

roles/ldap-client/tasks/1_group_security.yml

@@ -18,4 +18,3 @@
     dest: /etc/sudoers
     regexp: "^%{{ sudo_group }}"
     line: "%{{ sudo_group }}	ALL=(ALL:ALL) ALL"
-

roles/ldap-client/tasks/2_userland_scripts.yml

@@ -15,4 +15,3 @@
     src: /usr/local/bin/chsh
     dest: /usr/local/bin/chsh.ldap
     state: link
-

roles/ldap-client/tasks/main.yml

@@ -22,4 +22,3 @@
     key: "{{ ssh_pub_keys }}"
     state: present
 #    exclusive: True
-

roles/ldap-client/templates/passwd.j2

@@ -1,4 +1,3 @@
 #!/bin/sh
 # {{ ansible_managed }}
 echo "Pour changer votre mot de passe,\nAllez sur l'intranet : {{intranet_url}}"
-

roles/ldap-replica/tasks/main.yml

@@ -56,4 +56,3 @@
 # Save the day
 - name: Start LDAP server
   service: name=slapd state=started
-

roles/ldap-replica/templates/schema.ldiff.j2

@@ -1183,4 +1183,3 @@ createTimestamp: 20150305013830Z
 entryCSN: 20160607103125.521039Z#000000#000#000000
 modifiersName: cn=config
 modifyTimestamp: 20160607103125Z
-

roles/matrix-mxisd/handlers/main.yml

@@ -4,4 +4,3 @@
   service:
     name: mxisd
     state: restarted
-

roles/matrix-mxisd/templates/mxisd/mxisd.yaml.j2

@@ -87,4 +87,3 @@ threepid:
 
           # Password for the account
           password: ""
-

roles/matrix-riot/tasks/main.yml

@@ -49,4 +49,3 @@
     dest: /etc/nginx/sites-enabled/riot
     state: link
   notify: Reload NGINX service
-

roles/matrix-synapse/handlers/main.yml

@@ -4,4 +4,3 @@
   service:
     name: matrix-synapse
     state: restarted
-

roles/matrix-synapse/templates/matrix-synapse/conf.d/listeners.yaml.j2

@@ -15,4 +15,3 @@ listeners:
         compress: true
       - names: [federation]
         compress: false
-

roles/nginx-reverse-proxy/handlers/main.yml

@@ -4,4 +4,3 @@
   service:
     name: nginx
     state: reloaded
-

roles/nginx-reverse-proxy/tasks/main.yml

@@ -29,4 +29,3 @@
     state: link
   loop: "{{ reversed_proxy_subdomains }}"
   notify: Reload NGINX service
-

roles/nginx-reverse-proxy/templates/nginx-sites-available.j2

@@ -33,4 +33,3 @@ server {
         add_header X-Clacks-Overhead "GNU Terry Pratchett";
     }
 }
-