adelgado/ansible-role-prometheus_node_exporter
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

unify host anme

Browse source
This commit is contained in:
Antonio J. Delgado 2023-08-23 13:22:35 +03:00
parent cb88569fe1
commit 55c99a2f98
3 changed files with 31 additions and 32 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
defaults/main.yml
View file

@ -2,4 +2,3 @@
# Default values for variables of the role # Default values for variables of the role
# variable_name: value # variable_name: value
letsencrypt_account_email: certs@example.org letsencrypt_account_email: certs@example.org
domain: example.org

8
tasks/configure_prometheus_exporters_certificates.yml
View file

@ -23,11 +23,11 @@
state: stopped state: stopped
- name: Request certificate for node-metrics - name: Request certificate for node-metrics
shell: "certbot certonly --agree-tos --email {{ letsencrypt_account_email }} --standalone -n -d node-metrics-{{ inventory_hostname }}.{{ domain }}" shell: "certbot certonly --agree-tos --email {{ letsencrypt_account_email }} --standalone -n -d node-metrics-{{ ansible_fqdn }}"
args: args:
creates: "/etc/letsencrypt/live/node-metrics-{{ inventory_hostname }}/fullchain.pem" creates: "/etc/letsencrypt/live/node-metrics-{{ ansible_fqdn }}/fullchain.pem"
- name: Request certificate for postfix-metrics - name: Request certificate for postfix-metrics
shell: "certbot certonly --agree-tos --email {{ letsencrypt_account_email }} --standalone -n -d postfix-metrics-{{ inventory_hostname }}.{{ domain }}" shell: "certbot certonly --agree-tos --email {{ letsencrypt_account_email }} --standalone -n -d postfix-metrics-{{ ansible_fqdn }}"
args: args:
creates: "/etc/letsencrypt/live/postfix-metrics-{{ inventory_hostname }}/fullchain.pem" creates: "/etc/letsencrypt/live/postfix-metrics-{{ ansible_fqdn }}/fullchain.pem"

52
templates/apache2.conf.j2
View file

@ -1,36 +1,36 @@
<VirtualHost *:80> <VirtualHost *:80>
ServerName node-metrics-{{ inventory_hostname }} ServerName node-metrics-{{ ansible_fqdn }}
DocumentRoot "/var/www/node-metrics-{{ inventory_hostname }}/" DocumentRoot "/var/www/node-metrics-{{ ansible_fqdn }}/"
<Directory "/var/www/node-metrics-{{ inventory_hostname }}/"> <Directory "/var/www/node-metrics-{{ ansible_fqdn }}/">
Options Indexes FollowSymLinks MultiViews Options Indexes FollowSymLinks MultiViews
AllowOverride None AllowOverride None
Require all granted Require all granted
</Directory> </Directory>
ErrorLog "/var/log/apache2/node-metrics-{{ inventory_hostname }}_insecure_error.log" ErrorLog "/var/log/apache2/node-metrics-{{ ansible_fqdn }}_insecure_error.log"
ServerSignature Off ServerSignature Off
CustomLog "/var/log/apache2/node-metrics-{{ inventory_hostname }}_insecure_access.log" combined CustomLog "/var/log/apache2/node-metrics-{{ ansible_fqdn }}_insecure_access.log" combined
Redirect permanent / https://node-metrics-{{ inventory_hostname }}/ Redirect permanent / https://node-metrics-{{ ansible_fqdn }}/
</VirtualHost> </VirtualHost>
<VirtualHost *:443> <VirtualHost *:443>
ServerName node-metrics-{{ inventory_hostname }} ServerName node-metrics-{{ ansible_fqdn }}
ServerAdmin webmaster@susurrando.com ServerAdmin webmaster@susurrando.com
DocumentRoot "/var/www/node-metrics-{{ inventory_hostname }}/" DocumentRoot "/var/www/node-metrics-{{ ansible_fqdn }}/"
<Directory "/var/www/node-metrics-{{ inventory_hostname }}/"> <Directory "/var/www/node-metrics-{{ ansible_fqdn }}/">
Options -Indexes +FollowSymLinks Options -Indexes +FollowSymLinks
AllowOverride None AllowOverride None
Require all granted Require all granted
</Directory> </Directory>
ErrorLog "/var/log/apache2/node-metrics-{{ inventory_hostname }}_ssl_error_ssl.log" ErrorLog "/var/log/apache2/node-metrics-{{ ansible_fqdn }}_ssl_error_ssl.log"
ServerSignature Off ServerSignature Off
CustomLog "/var/log/apache2/node-metrics-{{ inventory_hostname }}_ssl_access_ssl.log" combined CustomLog "/var/log/apache2/node-metrics-{{ ansible_fqdn }}_ssl_access_ssl.log" combined
ErrorDocument 404 /notfound.php ErrorDocument 404 /notfound.php
ErrorDocument 500 /error500.php ErrorDocument 500 /error500.php
ErrorDocument 503 /error503.php ErrorDocument 503 /error503.php
RewriteEngine On RewriteEngine On
SSLEngine on SSLEngine on
SSLCertificateFile "/etc/letsencrypt/live/node-metrics-{{ inventory_hostname }}/fullchain.pem" SSLCertificateFile "/etc/letsencrypt/live/node-metrics-{{ ansible_fqdn }}/fullchain.pem"
SSLCertificateKeyFile "/etc/letsencrypt/live/node-metrics-{{ inventory_hostname }}/privkey.pem" SSLCertificateKeyFile "/etc/letsencrypt/live/node-metrics-{{ ansible_fqdn }}/privkey.pem"
SSLProtocol all -SSLv3 -SSLv2 -TLSv1 -TLSv1.1 SSLProtocol all -SSLv3 -SSLv2 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
DefineExternalAuth mysqlauth pipe /usr/local/bin/mysql-auth.pl DefineExternalAuth mysqlauth pipe /usr/local/bin/mysql-auth.pl
@ -40,38 +40,38 @@
</VirtualHost> </VirtualHost>
<VirtualHost *:80> <VirtualHost *:80>
ServerName postfix-metrics-{{ inventory_hostname }} ServerName postfix-metrics-{{ ansible_fqdn }}
DocumentRoot "/var/www/postfix-metrics-{{ inventory_hostname }}/" DocumentRoot "/var/www/postfix-metrics-{{ ansible_fqdn }}/"
<Directory "/var/www/postfix-metrics-{{ inventory_hostname }}/"> <Directory "/var/www/postfix-metrics-{{ ansible_fqdn }}/">
Options Indexes FollowSymLinks MultiViews Options Indexes FollowSymLinks MultiViews
AllowOverride None AllowOverride None
Require all granted Require all granted
</Directory> </Directory>
ErrorLog "/var/log/apache2/postfix-metrics-{{ inventory_hostname }}_insecure_error.log" ErrorLog "/var/log/apache2/postfix-metrics-{{ ansible_fqdn }}_insecure_error.log"
ServerSignature Off ServerSignature Off
CustomLog "/var/log/apache2/postfix-metrics-{{ inventory_hostname }}_insecure_access.log" combined CustomLog "/var/log/apache2/postfix-metrics-{{ ansible_fqdn }}_insecure_access.log" combined
Redirect permanent / https://postfix-metrics-{{ inventory_hostname }}/ Redirect permanent / https://postfix-metrics-{{ ansible_fqdn }}/
</VirtualHost> </VirtualHost>
<VirtualHost *:443> <VirtualHost *:443>
ServerName postfix-metrics-{{ inventory_hostname }} ServerName postfix-metrics-{{ ansible_fqdn }}
ServerAdmin webmaster@susurrando.com ServerAdmin webmaster@susurrando.com
DocumentRoot "/var/www/postfix-metrics-{{ inventory_hostname }}/" DocumentRoot "/var/www/postfix-metrics-{{ ansible_fqdn }}/"
<Directory "/var/www/postfix-metrics-{{ inventory_hostname }}/"> <Directory "/var/www/postfix-metrics-{{ ansible_fqdn }}/">
Options -Indexes +FollowSymLinks Options -Indexes +FollowSymLinks
AllowOverride None AllowOverride None
Require all granted Require all granted
</Directory> </Directory>
ErrorLog "/var/log/apache2/postfix-metrics-{{ inventory_hostname }}_ssl_error_ssl.log" ErrorLog "/var/log/apache2/postfix-metrics-{{ ansible_fqdn }}_ssl_error_ssl.log"
ServerSignature Off ServerSignature Off
CustomLog "/var/log/apache2/postfix-metrics-{{ inventory_hostname }}_ssl_access_ssl.log" combined CustomLog "/var/log/apache2/postfix-metrics-{{ ansible_fqdn }}_ssl_access_ssl.log" combined
ErrorDocument 404 /notfound.php ErrorDocument 404 /notfound.php
ErrorDocument 500 /error500.php ErrorDocument 500 /error500.php
ErrorDocument 503 /error503.php ErrorDocument 503 /error503.php
RewriteEngine On RewriteEngine On
SSLEngine on SSLEngine on
SSLCertificateFile "/etc/letsencrypt/live/postfix-metrics-{{ inventory_hostname }}/fullchain.pem" SSLCertificateFile "/etc/letsencrypt/live/postfix-metrics-{{ ansible_fqdn }}/fullchain.pem"
SSLCertificateKeyFile "/etc/letsencrypt/live/postfix-metrics-{{ inventory_hostname }}/privkey.pem" SSLCertificateKeyFile "/etc/letsencrypt/live/postfix-metrics-{{ ansible_fqdn }}/privkey.pem"
SSLProtocol all -SSLv3 -SSLv2 -TLSv1 -TLSv1.1 SSLProtocol all -SSLv3 -SSLv2 -TLSv1 -TLSv1.1
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
DefineExternalAuth mysqlauth pipe /usr/local/bin/mysql-auth.pl DefineExternalAuth mysqlauth pipe /usr/local/bin/mysql-auth.pl