lafrite/serveur_lycee
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Compare commits

base: lafrite:836d079a0a55d1eb54c9dda5af24f676b223a458
Branches Tags
lafrite:master
..
compare: lafrite:master
Branches Tags
lafrite:master

10 Commits
836d079a0a ... master

Author SHA1 Message Date
Bertrand Benjamin
c6eab7b09a Feat: add ftp 2022-09-06 20:19:43 +02:00
Bertrand Benjamin
b365759be6 Feat: maj du deploiement (testé) 2022-09-06 19:53:17 +02:00
Bertrand Benjamin
211b7d5725 Merge remote-tracking branch 'origin/master' into master 2020-09-25 13:49:20 +02:00
Bertrand Benjamin
c9a161e215 Feat: accounts for tribes 2020-09-25 13:47:32 +02:00
Bertrand Benjamin
d91a5e97fd Feat: mysql user creation done 2020-09-25 07:02:45 +02:00
Bertrand Benjamin
67626a455b Feat: account creation! 2020-09-23 23:04:15 +02:00
Bertrand Benjamin
d8b0c86d3d Fix: good dest for root_index 2020-09-23 22:38:15 +02:00
Bertrand Benjamin
4194486224 Feat: preparing for accounts creation 2020-09-23 18:20:00 +02:00
Bertrand Benjamin
c4b221354b Feat: add README 2020-09-23 18:19:22 +02:00
Bertrand Benjamin
7ebd1be9fd Feat: remove userdir task file 2020-09-23 18:16:03 +02:00
15 changed files with 221 additions and 55 deletions
Expand all files Collapse all files

10
README.md Normal file
View File

@@ -0,0 +1,10 @@
# Mise en place du serveur pédagogique pour la SNT
Avec une Debian ou une Ubuntu serveur toute fraiche, installer git et ansible
apt install git ansible
Cloner le dépot puis
cd serveur_lycee
ansible-playbook localhost.yml

15
files/index.html.j2
View File

@@ -1 +1,14 @@
<h1> Serveur pédagogique pour {{ name }} </h1> <!DOCTYPE html>
<html lang=fr>
<head>
<meta charset="UTF-8">
<meta name="Author" content="B.Bertrand">
<title>{{ item }}</title>
</head>
<body>
<h1> Serveur pédagogique pour {{ item }} </h1>
<!-- corps: tout ce que l'on veut afficher doit être mis entre ces balises -->
</body>
</html>

22
files/root_index.html.j2 Normal file
View File

@@ -0,0 +1,22 @@
<!DOCTYPE html>
<html lang=fr>
<head>
<meta charset="UTF-8">
<meta name="Author" content="B.Bertrand">
<title>{{ item }}</title>
</head>
<body>
<h1> Serveur pédagogique pour {{ matiere }} </h1>
<!-- corps: tout ce que l'on veut afficher doit être mis entre ces balises -->
<ul>
{% for user in peda %}
<li>
<a href="./~{{ user }}">{{ user }}</a>
</li>
{% endfor%}
</ul>
</body>
</html>

10
files/userdir.conf.j2
View File

@@ -1,10 +0,0 @@
<IfModule mod_userdir.c>
UserDir public_html
UserDir disabled root
<Directory /home/*/public_html>
AllowOverride All
Options MultiViews Indexes SymLinksIfOwnerMatch
Require all granted
</Directory>
</IfModule>

11
files/vsftpd.conf.j2 Normal file
View File

@@ -0,0 +1,11 @@
listen=YES
listen_ipv6=NO
anonymous_enable=NO
local_enable=YES
write_enable=YES
chroot_local_user=YES
allow_writeable_chroot=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd

5
home Normal file
View File

@@ -0,0 +1,5 @@
[nsi]
192.168.2.146 ansible_user=debian
[snt]
ansible ansible_user=debian

9
localhost.yml
View File

@@ -1,13 +1,14 @@
--- ---
- hosts: 127.0.0.1 - hosts: all
connection: local #ask_pass: true
become: true become: true
vars_files: vars_files:
- vars/default.yml - vars/default.yml
- vars/accounts.yml
tasks: tasks:
- include: tasks/lamp.yml #- include: tasks/lamp.yml
- include: tasks/userdir.yml - include: tasks/accounts.yml
handlers: handlers:
- name: Reload Apache - name: Reload Apache

5
lycee Normal file
View File

@@ -0,0 +1,5 @@
[stex]
stex.ovh ansible_port=25022 ansible_user=root
[home]
192.168.2.146 ansible_user=debian

34
lycee.yml Normal file
View File

@@ -0,0 +1,34 @@
---
- hosts: snt
#ask_pass: true
become: true
vars_files:
- vars/default.yml
- vars/snt_accounts.yml
pre_tasks:
- name: Update
apt:
update_cache: true
upgrade: true
tasks:
- include: tasks/lamp.yml
- include: tasks/ftp.yml
- include: tasks/accounts.yml
handlers:
- name: Reload Apache
service:
name: apache2
state: reloaded
- name: Restart Apache
service:
name: apache2
state: restarted
- name: Reload vsftpd
service:
name: vsftpd
state: reload

42
tasks/accounts.yml Normal file
View File

@@ -0,0 +1,42 @@
---
- name: add users
user:
name: "{{ item }}"
create_home: true
password: "{{ lookup('password', './pass/' + item + '_pass length=10 chars=ascii_letters') | password_hash('sha512') }}"
update_password: on_create
with_items: "{{ users }}"
register: returned
- name: create public_html
file:
path: "/home/{{ item}}/public_html/"
owner: "{{ item }}"
group: www-data
state: directory
with_items: "{{ users }}"
- name: Sets Up Index page
template:
src: "files/index.html.j2"
dest: "/home/{{ item }}/public_html/index.html"
mode: 774
with_items: "{{ users }}"
- name: create database
mysql_db:
db: "{{ item }}"
state: present
login_user: root
login_password: "{{ mysql_root_password }}"
with_items: "{{ users }}"
- name: create db user
mysql_user:
user: "{{ item }}"
password: "{{ lookup('password', './pass/' + item + '_sql length=10 chars=ascii_letters') | password_hash('sha512') }}"
priv: "{{ item + '.*:ALL,GRANT' }}"
login_user: root
login_password: "{{ mysql_root_password }}"
state: present
with_items: "{{ users }}"

19
tasks/ftp.yml Normal file
View File

@@ -0,0 +1,19 @@
---
- name: Install vsftpd Packages
apt:
name: "{{ item }}"
state: latest
loop:
- 'vsftpd'
- name: Set up vsftpd conf
template:
src: "files/vsftpd.conf.j2"
dest: "/etc/vsftpd.conf"
notify: Reload vsftpd
- name: Start vsftpd service
service:
name: vsftpd
enabled: true
state: started

37
tasks/lamp.yml
View File

@@ -1,12 +1,14 @@
--- ---
- name: Install prerequisites
apt: name={{ item }} update_cache=yes state=latest force_apt_get=yes
loop: [ 'aptitude' ]
#Apache Configuration #Apache Configuration
- name: Install LAMP Packages - name: Install LAMP Packages
apt: name={{ item }} update_cache=yes state=latest apt: name={{ item }} update_cache=yes state=latest
loop: [ 'apache2', 'mysql-server', 'python3-pymysql', 'php', 'php-mysql', 'libapache2-mod-php' ] loop:
- 'apache2'
- 'mariadb-server'
- 'python3-pymysql'
- 'php'
- 'php-mysql'
- 'libapache2-mod-php'
- name: Create document root - name: Create document root
file: file:
@@ -30,12 +32,18 @@
when: disable_default when: disable_default
notify: Reload Apache notify: Reload Apache
# MySQL Configuration # MySQL Configuration
- name: Start MariaDB service
service:
name: mariadb
state: started
- name: Sets the root password - name: Sets the root password
mysql_user: mysql_user:
name: root name: root
password: "{{ mysql_root_password }}" password: "{{ mysql_root_password }}"
login_unix_socket: /var/run/mysqld/mysqld.sock login_unix_socket: /var/run/mysqld/mysqld.sock
ignore_errors: yes
- name: Removes all anonymous user accounts - name: Removes all anonymous user accounts
mysql_user: mysql_user:
@@ -52,12 +60,6 @@
login_user: root login_user: root
login_password: "{{ mysql_root_password }}" login_password: "{{ mysql_root_password }}"
- name: "UFW - Allow HTTP on port {{ http_port }}"
ufw:
rule: allow
port: "{{ http_port }}"
proto: tcp
- name: Sets Up PHP Info Page - name: Sets Up PHP Info Page
template: template:
src: "files/info.php.j2" src: "files/info.php.j2"
@@ -65,8 +67,13 @@
- name: Sets Up Index page - name: Sets Up Index page
template: template:
src: "files/index.html.j2" src: "files/root_index.html.j2"
dest: "/var/www/{{ http_host }}/info.php" dest: "/var/www/{{ http_host }}/index.html"
vars: vars:
name: "la SNT" item:
- "{{ matiere }}"
- name: Enable userdir
shell: /usr/sbin/a2enmod userdir
notify: Reload Apache

11
tasks/userdir.yml
View File

@@ -1,11 +0,0 @@
---
- name: Enable userdir
shell: /usr/sbin/a2enmod userdir
notify: Reload Apache
- name: Set up userdir virtualhost
template:
src: "files/userdir.conf.j2"
dest: "/etc/apache2/mods-enabled/userdir.conf"
notify: Reload Apache

4
vars/accounts.yml Normal file
View File

@@ -0,0 +1,4 @@
---
users:
- name: test1
- name: test2

14
vars/snt_accounts.yml Normal file
View File

@@ -0,0 +1,14 @@
---
matiere: "SNT"
peda:
- "2GTG1"
- "2GTG2"
- "2GTG3"
- "2GTG4"
- "2GTG5"
- "2GTG6"
- "2GTG8"
- "2GTG9"
profs:
- "proftest"
users: "{{ peda + profs }}"