init
This commit is contained in:
92
roles/configure/tasks/main.yaml
Normal file
92
roles/configure/tasks/main.yaml
Normal file
@@ -0,0 +1,92 @@
|
||||
---
|
||||
- name: Set disable_ipv6 parameters in the sysctl configuration file
|
||||
ansible.posix.sysctl:
|
||||
name: "{{ item }}"
|
||||
value: "1"
|
||||
reload: false
|
||||
loop:
|
||||
- net.ipv6.conf.all.disable_ipv6
|
||||
- net.ipv6.conf.default.disable_ipv6
|
||||
- net.ipv6.conf.lo.disable_ipv6
|
||||
- net.ipv4.ip_forward
|
||||
notify: Reload the sysctl configuration
|
||||
|
||||
- name: Stop disable dnsmasq
|
||||
service:
|
||||
name: dnsmasq
|
||||
state: stopped
|
||||
enabled: false
|
||||
|
||||
- name: Start enable iptables
|
||||
service:
|
||||
name: iptables
|
||||
state: started
|
||||
enabled: true
|
||||
|
||||
- name: Get physical interfaces names
|
||||
command: find /sys/class/net -type l -lname '*wlp*' -printf '%f\n'
|
||||
register: wifi_int
|
||||
changed_when: false
|
||||
check_mode: false
|
||||
|
||||
- name: Run nmcli to check if wifi access point connection has already been added
|
||||
shell: /usr/bin/nmcli c | grep {{ wifi_ssid }}
|
||||
register: nmcli_result
|
||||
ignore_errors: True
|
||||
|
||||
- name: Check result nmcli
|
||||
set_fact:
|
||||
nmcli_failed: "{{ nmcli_result.rc != 0 }}"
|
||||
|
||||
- name: Run nmcli to add a connection with the specified parameters as a wifi access point if above check has failed
|
||||
command: /usr/bin/nmcli c add autoconnect yes save yes con-name {{ wifi_ssid }} ifname {{ wifi_int.stdout }} type wifi ssid {{ wifi_ssid }} mode ap ip4 {{ wifi_int_ip }}
|
||||
when: nmcli_failed
|
||||
|
||||
- name: Run nmcli to add WPA-PSK security to the wifi connection
|
||||
command: /usr/bin/nmcli c mod {{ wifi_ssid }} \
|
||||
802-11-wireless.band bg \
|
||||
802-11-wireless.channel 1 \
|
||||
802-11-wireless-security.key-mgmt wpa-psk \
|
||||
802-11-wireless-security.proto rsn \
|
||||
802-11-wireless-security.group ccmp \
|
||||
802-11-wireless-security.pairwise ccmp \
|
||||
802-11-wireless-security.psk {{ wifi_psk }} \
|
||||
ipv4.method shared \
|
||||
ipv4.addr {{ wifi_int_ip }}/24
|
||||
|
||||
- name: Run nmcli to activate wifi access point connection
|
||||
command: /usr/bin/nmcli c up {{ wifi_ssid }}
|
||||
|
||||
# - name: Configure {{ wifi_int.stdout_lines | first }} interface
|
||||
# template:
|
||||
# src: 25-wireless.network.j2
|
||||
# dest: /etc/systemd/network/25-wireless.network
|
||||
# notify: Restart systemd-networkd
|
||||
|
||||
# - name: Configure NetworkManager
|
||||
# template:
|
||||
# src: unmanaged.conf.j2
|
||||
# dest: /etc/NetworkManager/conf.d/unmanaged.conf
|
||||
# notify: Restart NetworkManager
|
||||
|
||||
# - name: Configure hostapd
|
||||
# template:
|
||||
# src: hostapd.conf.j2
|
||||
# dest: /etc/hostapd/hostapd.conf
|
||||
# notify: Restart hostapd
|
||||
|
||||
# - name: Configure hostapd
|
||||
# template:
|
||||
# src: dhcpd.conf.j2
|
||||
# dest: /etc/dhcpd.conf
|
||||
# # notify: Restart dhcpd
|
||||
|
||||
# - name: Enable services
|
||||
# service: "{{ app }}"
|
||||
# enabled: yes
|
||||
# loop: "{{ apps }}"
|
||||
# loop_control:
|
||||
# loop_var: "app"
|
||||
# - name: Force all notified handlers to run at this point
|
||||
# ansible.builtin.meta: flush_handlers
|
||||
|
||||
Reference in New Issue
Block a user