mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2025-01-18 08:06:16 +01:00
f95299917b
As per my announcement to arch-devops[1] and staff, this adds a Mumble server for Arch Linux. The password for the special root user SuperAdmin is automatically generated on first launch and printed to the logs. I went ahead and added it to the vault. It should not usually be required to login as SuperAdmin though as long as there are user admins around. This uses certbot for local certificates. [1] https://lists.archlinux.org/archives/list/arch-devops@lists.archlinux.org/thread/AHAOSTGFJTLQDSXLWFORDKGR6RDVHYEI/
36 lines
1.0 KiB
YAML
36 lines
1.0 KiB
YAML
- name: Install mumble-server
|
|
pacman: name=mumble-server state=present
|
|
|
|
- name: Open firewall holes
|
|
ansible.posix.firewalld: port={{ item }} permanent=true state=enabled immediate=yes
|
|
when: configure_firewall
|
|
with_items:
|
|
- "64738/tcp"
|
|
- "64738/udp"
|
|
tags:
|
|
- firewall
|
|
|
|
- name: Configure mumble-server
|
|
template: src=mumble-server.ini.j2 dest=/etc/mumble/mumble-server.ini owner=root group=root mode=0644
|
|
notify:
|
|
- Restart mumble-server
|
|
|
|
- name: Add certbot hook
|
|
copy: src=restart-mumble-server.sh dest=/etc/letsencrypt/hook.d/restart-mumble-server.sh owner=root group=root mode=0755
|
|
|
|
- name: Create ssl cert for mumble-server
|
|
include_role:
|
|
name: certificate
|
|
vars:
|
|
domains: ["{{ inventory_hostname }}"]
|
|
challenge: "DNS-01"
|
|
register: result
|
|
|
|
- name: Install the certificate by running the certbot hook
|
|
command: /etc/letsencrypt/hook.d/restart-mumble-server.sh post
|
|
args:
|
|
creates: /var/lib/mumble-server/fullchain.pem
|
|
|
|
- name: Enable and start mumble-server.service
|
|
service: name=mumble-server enabled=yes state=started
|