nagios_server updates

roles/nagios_server/tasks/main.yml

@@ -16,12 +16,22 @@
   with_items:
   - nagios3
   - python-passlib
+  - libapache2-mod-webauthldap
   sudo: true
   when: ansible_os_family == "Debian"
 
-- name: configure nagios authentication
-  htpasswd: path=/etc/nagios3/htpasswd.users name={{ nagios_username }} password={{ nagios_password }}
-  sudo: true
+- name: enable apache modules
+  apache2_module: state=present name={{ item }}
+  with_items:
+  - ldap
+  - authnz_ldap
+  become: true
+  become_user: root
+
+- name: install apache site config
+  template: src=nagios3.conf.j2 dest=/etc/apache2/conf-available/nagios3.conf
+  become: true
+  become_user: root
 
 - name: force restart
   service: name=nagios3 state=started

roles/nagios_server/templates/cgi.cfg.j2

@@ -129,7 +129,7 @@ use_ssl_authentication=0
 # not use authorization.  You may use an asterisk (*) to
 # authorize any user who has authenticated to the web server.
 
-authorized_for_system_information=nagiosadmin,nagios
+authorized_for_system_information=*
 
 
 
@@ -141,7 +141,7 @@ authorized_for_system_information=nagiosadmin,nagios
 # an asterisk (*) to authorize any user who has authenticated
 # to the web server.
 
-authorized_for_configuration_information=nagiosadmin,nagios
+authorized_for_configuration_information=*
 
 
 
@@ -154,7 +154,7 @@ authorized_for_configuration_information=nagiosadmin,nagios
 # You may use an asterisk (*) to authorize any user who has
 # authenticated to the web server.
 
-authorized_for_system_commands=nagiosadmin,nagios
+authorized_for_system_commands=*
 
 
 
@@ -167,8 +167,8 @@ authorized_for_system_commands=nagiosadmin,nagios
 # to authorize any user who has authenticated to the web server.
 
 
-authorized_for_all_services=nagiosadmin,nagios
-authorized_for_all_hosts=nagiosadmin,nagios
+authorized_for_all_services=*
+authorized_for_all_hosts=*
 
 
 
@@ -181,8 +181,8 @@ authorized_for_all_hosts=nagiosadmin,nagios
 # authorization).  You may use an asterisk (*) to authorize any
 # user who has authenticated to the web server.
 
-authorized_for_all_service_commands=nagiosadmin,nagios
-authorized_for_all_host_commands=nagiosadmin,nagios
+authorized_for_all_service_commands=*
+authorized_for_all_host_commands=*
 
 
 
@@ -374,4 +374,3 @@ lock_author_names=1
 #splunk_url=http://127.0.0.1:8000/
 
 
-

roles/upgrade/tasks/main.yml

 ---
+
+- name: install aptitude
+  apt: name=aptitude state=installed
+  become: true
+  become_user: root
+  when: ansible_os_family=="Debian"
+
 - name: apt-get upgrade
   apt: upgrade=safe
   sudo: true