Skip to content
Snippets Groups Projects
Commit 4ed24b4e authored by Chris Hines's avatar Chris Hines
Browse files
parents 44ab9cb5 81251ca3
No related branches found
No related tags found
No related merge requests found
......@@ -11,9 +11,6 @@
- nfs-server
sudo: true
vars:
ansible_ssh_private_key_file: "/home/sgeadmin/.ssh/shahaan.pem"
ansible_ssh_user: "ec2-user"
nfs_network: "10.8.0.0/16"
x509_ca_server: vm-118-138-240-224.erc.monash.edu.au
-
hosts: openvpn-clients
......@@ -23,12 +20,10 @@
- easy-rsa-certificate
- OpenVPN-Client
- nfs-common
- syncExports
- nfs-client
sudo: true
vars:
ansible_ssh_private_key_file: "/home/sgeadmin/.ssh/shahaan.pem"
ansible_ssh_user: "ec2-user"
x509_ca_server: vm-118-138-240-224.erc.monash.edu.au
openvpn_servers: ['vm-118-138-240-224.erc.monash.edu.au']
server: vm-118-138-240-224.erc.monash.edu.au
nfs_server: "10.8.0.1"
nfs_server: "vm-118-138-240-224.erc.monash.edu.au"
......@@ -93,7 +93,7 @@ dh {{ dhparms_file }}
# Each client will be able to reach the server
# on 10.8.0.1. Comment this line out if you are
# ethernet bridging. See the man page for more info.
server 10.8.0.0 255.255.255.0
server {{ server_network }} {{ server_netmask }}
# Maintain a record of client <-> virtual IP address
# associations in this file. If OpenVPN goes down or
......
......@@ -5,3 +5,5 @@ x509_key_file: "/etc/openvpn/private/server.key"
x509_cert_file: "/etc/openvpn/certs/server.crt"
x509_common_name: "{{ ansible_fqdn }}_OpenVPN_Server"
dhparms_file: "/etc/openvpn/private/dh.pem"
server_network: "10.8.0.0"
server_netmask: "255.255.255.0"
---
-
name: "Get the NFS Network"
setup: filter="ansible_tun0"
register: nfsServer
run_once: true
delegate_to: "{{ nfs_server }}"
-
mount: "name={{ item.0 }} src={{ nfs_server }}:{{ item.1 }} fstype={{ nfs_type }} opts={{ nfs_options }} state=mounted"
mount: "name={{ item.0 }} src={{ nfsServer['ansible_facts']['ansible_tun0']['ipv4']['address'] }}:{{ item.1 }} fstype={{ nfs_type }} opts={{ nfs_options }} state=mounted"
name: "Mounting NFS mounts"
with_together:
- destDir
......
......@@ -2,9 +2,6 @@
-
name: "Starting rpcbind"
service: "name=rpcbind state=started"
-
name: "Copying /etc/exports template"
template: "src=exports.j2 dest=/etc/exports mode=0644 owner=root"
-
name: "Start the Server"
service: "name=nfs state=started"
{{ srcDir }} {{ nfs_network }}(rw,sync,root_squash)
---
srcDir: '/mnt'
---
-
name: "Templating /etc/exports"
template: src=exports.j2 dest=/etc/exports owner=root group=root mode=644
delegate_to: "{{ nfs_server }}"
run_once: true
---
- include : addExports.yml
{% for src in srcDir %}
{{ src }} {% for node in groups['openvpn-clients'] %}{% for ip in hostvars[node]['ansible_all_ipv4_addresses'] %}{{ ip }}(rw,sync,root_squash) {% endfor %}{% endfor %}
{% endfor %}
---
-
hosts: openvpn-clients
remote_user: ec2-user
roles:
- syncExports
- nfs-client
sudo: true
vars:
nfs_server: "vm-118-138-240-224.erc.monash.edu.au"
openvpn_servers:
- vm-118-138-240-224.erc.monash.edu.au
x509_ca_server: vm-118-138-240-224.erc.monash.edu.au
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment