Name: gateone-server-ansible
Owner: CyVerse
Description: This repo provides the ansible playbook and role needed to install gateone
Created: 2015-11-09 18:41:27.0
Updated: 2018-05-22 17:34:00.0
Pushed: 2018-05-22 17:33:59.0
Homepage:
null
Size: 10
Language: null
GitHub Committers
User | Most Recent Commit | # Commits |
Other Committers
User | Email | Most Recent Commit | # Commits |
README
gateone-server-ansible
This repo provides the ansible playbook and role needed to install gateone. To use this with your ansible, you should link role into the roles directory. By default, the roles directory is /etc/ansible/roles. You'll also need to define a few variables. Currently, this playbook and role assumes Ubuntu. With a little effort, other distros could be supported.
Installation
- git clone gateone-server-ansible repo (e.g. into /opt/gateone-server-ansible)
- Assuming roles is in /etc/ansible/roles, ln -s /opt/gateone-server-ansbile/ /etc/ansible/roles/
- Define the host(s) into /etc/ansible/hosts (or wherever your hosts file is configured for). The playbook assumes the server(s) are defined in the host group called “gateone-servers”.
- Define the following variables, generally in the hosts file or group_vars:
- GATEONE_REPO: location of the gateone repo
- GATEONE_CONFIG_REPO: location of the config repo
- SSH_HOST_SRC: directory containing ssl certs
- SSH_HOST_KEY: ssl key file name
- SSH_HOST_CERT: ssl cert file name
- UFW_DO_CONFIGURE: boolean whether to configure ufw or not
- UFW_INCOMING_ALLOW: array of dictionary items containing ip and ports to allow incoming (each array element has an ip and port to allow incoming). UFW is executed only if UFW_DO_CONFIGURE is true
- UFW_OUTGOING_ALLOW: array of dictionary items containing ip and ports to allow outgoing, similar to UFW_INCOMING_ALLOW. UFW is executed only if UFW_DO_CONFIGURE is true.
- the gateone server should start after the playbook is executed, assuming the configuration is correct
Other notes