Ansible ConfigServer Role

=========================

This role installs ConfigServer products and their free scripts.

Role Variables

• macklus:
  • configserver:
    • cmm:
      • install: true (whether to install CMM or not)
    • cmq:
      • install: true (whether to install CMQ or not)
    • cse:
      • install: true (whether to install CSE or not)
    • csf:
      • install: true (whether to install CSF or not)
      • options:
        • testing: 1 (enable testing)
        • testing_interval: 5 (interval for testing)
        • auto_updates: 1 (enable automatic updates)
        • tcp_in: "20,21,22,25,53,80,110,143,443,465,587,993,995" (incoming TCP ports)
        • tcp_out: "20,21,22,25,53,80,110,113,443,587,993,995" (outgoing TCP ports)
        • udp_in: "20,21,53" (incoming UDP ports)
        • udp_out: "20,21,53,113,123" (outgoing UDP ports)
      • allow: [] (list of allowed IPs)
      • deny: [] (list of denied IPs)
      • fignore: [] (files to ignore)
      • ignore: [] (other items to ignore)
      • mignore: [] (more files to ignore)
      • pignore: [] (processes to ignore)
      • rignore: [] (requests to ignore)
      • signore: [] (service to ignore)
      • suignore: [] (superuser actions to ignore)
    • cxs:
      • install: false (whether to install CXS or not)
      • install_cxswatch: false (whether to install CXS watch)
      • cxswatch:
        • options: '' (options for CXS watch)
        • maxchild: 3 (maximum child processes)
        • loglevel: 0 (log level)
        • sleep: 3 (sleep duration)
        • filemax: 0 (maximum files to track)
        • rateignore: 300 (ignore rate)

Configuration Options

• macklus.configserver.cmm.install: Install CMM (true|false)
• macklus.configserver.cmq.install: Install CMQ (true|false)
• macklus.configserver.cse.install: Install CSE (true|false)
• macklus.configserver.csf.install: Install CSF (true|false)
• macklus.configserver.csf.options: Options for the csf.conf file
• macklus.configserver.csf.allow: Lines for the csf.allow file
• macklus.configserver.csf.deny: Lines for the csf.deny file
• macklus.configserver.csf.fignore: Lines for the csf.fignore file
• macklus.configserver.csf.mignore: Lines for the csf.mignore file
• macklus.configserver.csf.pignore: Lines for the csf.pignore file
• macklus.configserver.csf.rignore: Lines for the csf.rignore file
• macklus.configserver.csf.signore: Lines for the csf.signore file
• macklus.configserver.csf.suignore: Lines for the csf.suignore file

For cxs:

• macklus.configserver.cxs.install: Install CXS (true|false)

Example Playbook

Here’s how you can use this role with parameters:

- hosts: servers
  roles:
    - macklus.configserver/cmm
    - macklus.configserver/cmq
    - macklus.configserver/cse
    - macklus.configserver/csf
    - macklus.configserver/cxs

License

GPL-3.0-only