freifunk/ansible-ffibk
9
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Role prerequisites: add cname asserts

Browse source
This commit is contained in:
Tobias Hachmer 2017-11-11 23:24:49 +01:00
parent e020ea0854
commit 623faaa40f
3 changed files with 13 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
roles/prerequisites/README.md
View file

@ -2,18 +2,17 @@
Diese Ansible role prüft ob die Voraussetzungen für ein Freifunk Gateway erfüllt sind.
- Forward-DNS Eintrag == ausgelesener IPv4-Adresse
- Forward-DNS Eintrag == ausgelesener IPv6-Adresse
- Forward-DNS Eintrag $FQDN == ausgelesener IPv4-Adresse
- Forward-DNS Eintrag $FQDN == ausgelesener IPv6-Adresse
- CNAME Eintrag gate$magic.freifunk-mwu.de == $FQDN
- CNAME Eintrag icvpn$magic.freifunk-mwu.de == $FQDN
- Linux Distribution == Debian
- Debian Version == 9
## Benötigte Variablen
Die folgenden Variablen werden über einen DNS Lookup gesetzt:
- Variable `dns_host_ipv4_address` (Rollen-Variable)
```
dns_host_ipv4_address: "{{ lookup('dig', inventory_hostname, 'qtype=A') }}"
```
- Variable `dns_host_ipv6_address` (Rollen-Variable)
```
dns_host_ipv6_address: "{{ lookup('dig', inventory_hostname, 'qtype=AAAA') }}"
```
- Variable `dns_gate_num_cname` (Rollen-Variable)
- Variable `dns_gate_icvpn_cname` (Rollen-Variable)

2
roles/prerequisites/tasks/main.yml
View file

@ -5,6 +5,8 @@
that:
- "dns_host_ipv4_address in ansible_all_ipv4_addresses"
- "dns_host_ipv6_address in ansible_all_ipv6_addresses"
- "dns_gate_num_cname == inventory_hostname"
- "dns_gate_icvpn_cname == inventory_hostname"
- "ansible_distribution == 'Debian'"
- "ansible_distribution_major_version == '9'"

4
roles/prerequisites/vars/main.yml
View file

@ -1,4 +1,8 @@
---
dns_gate_num: "gate{{ magic }}.{{ http_domain_external }}"
dns_gate_icvpn: "icvpn{{ magic }}.{{ http_domain_external }}"
dns_host_ipv4_address: "{{ lookup('dig', inventory_hostname, 'qtype=A') }}"
dns_host_ipv6_address: "{{ lookup('dig', inventory_hostname, 'qtype=AAAA') }}"
dns_gate_num_cname: "{{ lookup('dig', dns_gate_num, 'qtype=CNAME') | regex_replace('\\.$') }}"
dns_gate_icvpn_cname: "{{ lookup('dig', dns_gate_icvpn, 'qtype=CNAME') | regex_replace('\\.$') }}"