ANSIBLE7-配置网页服务器（类似考题）

botang

1. ---
   
2. - name: Web Configuration
   
3.   hosts: server1.example.com
   
4.   vars:
   
5.     v_firewall_pkg: firewalld
   
6.     v_firewall_svc: firewalld
   
7.     v_web_pkg: httpd
   
8.     v_web_svc: httpd
   
9. 
   
10.     v_httpconf_src: ./v4.d/files/vhosts.conf
    
11.     v_httpconf_dest: /etc/httpd/conf.d/vhosts.conf
    
12. 
    
13.     v_server_root: /var/www/html/server1
    
14.     v_web_server_src: ./v4.d/files/index-server1.html
    
15.     v_web_server_dest: /var/www/html/server1/index.html
    
16. 
    
17.     v_www_root: /var/www/html/www1
    
18.     v_web_www_src: ./v4.d/files/index-www1.html
    
19.     v_web_www_dest: /var/www/html/www1/index.html
    
20.     v_htaccess_src: ./v4.d/files/.htaccess
    
21.     v_htaccess_dest: /var/www/html/www1/.htaccess
    
22.     v_secrets_src: ./v4.d/files/www1.pass
    
23.     v_secrets_dest: /etc/httpd/www1.pass
    
24.   tasks:
    
25.   - name: Install Web Packages
    
26.     yum:
    
27.       name: "{{ v_web_pkg }}"
    
28.       state: latest
    
29. 
    
30.   - name: Create Remote Directory for server
    
31.     file:
    
32.       path: "{{ v_server_root }}"
    
33.       # recurse: yes
    
34.       state: directory
    
35. 
    
36.   - name: Create Remote Directory for www
    
37.     file:
    
38.       path: "{{ v_www_root }}"
    
39.       #recurse: yes
    
40.       state: directory
    
41. 
    
42.   - name: Copy index.html for server
    
43.     copy:
    
44.       src: "{{ v_web_server_src }}"
    
45.       dest: "{{ v_web_server_dest }}"
    
46. 
    
47.   - name: Modified the index.html for server
    
48.     lineinfile:
    
49.       path: "{{ v_web_server_dest }}"
    
50.       line: "{{ ansible_facts['fqdn'] }} and {{ ansible_facts['default_ipv4']['address'] }}"
    
51.       state: present
    
52. 
    
53.   - name: Copy index.html for www
    
54.     copy:
    
55.       src: "{{ v_web_www_src }}"
    
56.       dest: "{{ v_web_www_dest }}"
    
57. 
    
58.   - name: Modified the index.html for server
    
59.     lineinfile:
    
60.       path: "{{ v_web_www_dest }}"
    
61.       line: "{{ ansible_facts['fqdn'] }} and {{ ansible_default_ipv4['address'] }}"
    
62.       state: present
    
63. 
    
64.   - name: Copy Web Configuration
    
65.     copy:
    
66.       src: "{{ v_httpconf_src }}"
    
67.       dest: "{{ v_httpconf_dest }}"
    
68. 
    
69.   - name: Copy Web Passwd
    
70.     copy:
    
71.       src: "{{ v_secrets_src }}"
    
72.       dest: "{{ v_secrets_dest }}"
    
73. 
    
74.   - name: Copy Web Htaccess
    
75.     copy:
    
76.       src: "{{ v_htaccess_src }}"
    
77.       dest: "{{ v_htaccess_dest }}"
    
78. 
    
79.   - name: Start Web
    
80.     service:
    
81.       name: "{{ v_web_svc }}"
    
82.       state: restarted
    
83.       enabled: yes
    
84. 
    
85.   - name: Firewalld Service Enable and Started
    
86.     service:
    
87.       name: "{{ v_firewall_svc }}"
    
88.       state: started
    
89.       enabled: yes
    
90. 
    
91.   - name: Open the Port for the Web Server
    
92.     firewalld:
    
93.       service: http
    
94.       permanent: yes
    
95.       state: enabled
    
96.       immediate: yes
    
97. 
    
98. - name: Test Web Server with Basic Auth
    
99.   hosts: localhost
    
100.   vars:
     
101.     web_user: testuser1
     
102.   vars_files:
     
103.     - ./v4.d/vars/secret.yml
     
104.   tags:
     
105.     - tag1
     
106.   tasks:
     
107.   - name: Connect to Web Server without Basic Authentication
     
108.     uri:
     
109.       url: http://server1.example.com
     
110.       return_content: yes
     
111.       status_code: 200
     
112.     register: v_result_server
     
113. 
     
114.   - name: Connect to Web Server with Basic Authentication
     
115.     uri:
     
116.       url: http://www1.example.com
     
117.       validate_certs: no
     
118.       force_basic_auth: yes
     
119.       user: "{{ web_user }}"
     
120.       password: "{{ web_pass }}"
     
121.       return_content: yes
     
122.       status_code: 200
     
123.     register: v_result_www
     
124. 
     
125.   - name: Show the Result
     
126.     debug:
     
127.       var: "{{ item }}"
     
128.     loop:
     
129.       - v_result_server.content
     
130.       - v_result_server.status
     
131.       - v_result_www.content
     
132.       - v_result_www.status
     
133.   
     
134.    
     
135. 
     

复制代码

v4.d.zip (2.58 KB, 下载次数: 25)

2020-8-8 21:11 上传

点击文件名下载附件

了解loop循环的语法：

1. ---
   
2. - name: Runing Mail Server
   
3.   hosts: srvgroup
   
4.   vars:
   
5.     v_mail_servers:
   
6.       - postfix
   
7.       - dovecot
   
8.   tasks:
   
9.   - name: Install Postfix
   
10.     yum:
    
11.       name: "{{ item }}"
    
12.       state: latest
    
13.     loop:
    
14.        "{{ v_mail_servers }}"
    
15. 
    
16.   - name: Running Servers
    
17.     service:
    
18.       name: "{{ item }}"
    
19.       state: restarted
    
20.       enabled: yes
    
21.     loop:
    
22.       - postfix
    
23.       - dovecot
    

复制代码

这个剧本改进以后的样子：

1. ---
   
2. - name: Runing Mail Server
   
3.   hosts: srvgroup
   
4.   vars:
   
5.     v_mail_servers:
   
6.       - postfix
   
7.       - dovecot
   
8.     v_mail_firewall:
   
9.       - pop3
   
10.       - smtp
    
11.   tasks:
    
12.   - name: Install Postfix
    
13.     yum:
    
14.       name: "{{ item }}"
    
15.       state: latest
    
16.     loop:
    
17.       - "{{ v_mail_servers }}"
    
18. 
    
19.   - name: Config File
    
20.     lineinfile:
    
21.       path: /etc/postfix/main.cf
    
22.       regexp: '^inet_interfaces ='
    
23.       line: inet_interfaces = all
    
24. 
    
25.   - name: Running Servers
    
26.     service:
    
27.       name: "{{ item }}"
    
28.       state: restarted
    
29.       enabled: yes
    
30.     loop:
    
31.       - postfix
    
32.       - dovecot
    
33. 
    
34.   - name: Open the Port for the Web Server
    
35.     firewalld:
    
36.       service: "{{ item }}"
    
37.       permanent: yes
    
38.       state: enabled
    
39.       immediate: yes
    
40.     loop: "{{ v_mail_firewall }}"
    
41. 
    
42. - name: Runing Mail Server
    
43.   hosts: localhost
    
44.   vars:
    
45.     v_mail_servers:
    
46.       - postfix
    
47.       - dovecot
    
48.   tasks:
    
49.   - name: Install Postfix
    
50.     yum:
    
51.       name: "{{ item }}"
    
52.       state: latest
    
53.     loop:
    
54.       - "{{ v_mail_servers }}"
    
55. 
    
56.   - name: Config File
    
57.     lineinfile:
    
58.       path: /etc/postfix/main.cf
    
59.       regexp: '^inet_interfaces ='
    
60.       line: inet_interfaces = all
    
61. 
    
62. 
    
63.   - name: Running Servers
    
64.     service:
    
65.       name: "{{ item }}"
    
66.       state: restarted
    
67.       enabled: yes
    
68.     loop: "{{ v_mail_servers }}"
    
69. 
    

复制代码