1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-23 05:46:03 +02:00

Get rid of ldap.archlinux.org in favor keycloak.archlinux.org

This commit is contained in:
Sven-Hendrik Haase 2019-10-10 23:32:05 +02:00
parent 24262f6d4b
commit 080bece133
4 changed files with 18 additions and 74 deletions

View File

@ -76,21 +76,6 @@ resource "hcloud_server" "gitlab" {
}
}
resource "hcloud_rdns" "ldap" {
server_id = "${hcloud_server.ldap.id}"
ip_address = "${hcloud_server.ldap.ipv4_address}"
dns_ptr = "ldap.archlinux.org"
}
resource "hcloud_server" "ldap" {
name = "ldap.archlinux.org"
image = "${data.hcloud_image.archlinux.id}"
server_type = "cx11"
lifecycle {
ignore_changes = [image]
}
}
resource "hcloud_rdns" "matrix" {
server_id = "${hcloud_server.matrix.id}"
ip_address = "${hcloud_server.matrix.ipv4_address}"

View File

@ -0,0 +1,18 @@
---
- name: install keycloak
pacman: name=keycloak state=present
# - name: start dirsrv service
# service: name=dirsrv
# Levente TODO
# - name: open firewall hole
# firewalld: port={{ item }} permanent=true state=enabled immediate=yes
# when: configure_firewall
# with_items:
# Levente TODO
# - 389
# - 636
# tags:
# - firewall

View File

@ -1,59 +0,0 @@
---
- name: install ldap
pacman: name=389-ds-base,python-lib389 state=present
# - name: start dirsrv service
# service: name=dirsrv
- name: create parent entry categories
ldap_entry:
dn: ou={{item}},dc=archlinux,dc=org
objectClass:
- top
- organizationalUnit
attributes:
ou: {{item}}
with_items:
- users
- groups
- name: create user entries
ldap_entry:
dn: uid={{item.key}},ou=users,dc=archlinux,dc=org
objectClass:
- top
- person
- inetOrgPerson
- organizationalPerson
- posixAccount
attributes:
uid: {{item.key}}
givenName: {{item.value.name}}
with_dict: "{{ arch_users }}"
- name: create group entries
ldap_entry:
dn: cn={{item}},ou=groups,dc=archlinux,dc=org
objectClass:
- top
- posixGroup
with_items: "{{ arch_groups }}"
#TODO
#- name: associate groups with users
# ldap_attr:
# dn: cn={{ TODO GROUP HERE }},ou=groups,dc=archlinux,dc=org
# name: memberuid
# values: {{ TODO USER HERE }}
# state: present
# with_
- name: open firewall hole
firewalld: port={{ item }} permanent=true state=enabled immediate=yes
when: configure_firewall
with_items:
- 389
- 636
tags:
- firewall