User Tools

Site Tools


сервис_ansible

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
сервис_ansible [2026/01/18 18:36]
val [Роль OpenVPN сервера]
сервис_ansible [2026/02/08 09:43] (current)
val [Роль OpenVPN сервера]
Line 700: Line 700:
   vars:   vars:
     X: "{{ ansible_eth1.ipv4.address.split('​.'​)[2] }}"     X: "{{ ansible_eth1.ipv4.address.split('​.'​)[2] }}"
 +    #​ansible_ssh_common_args:​ '-o StrictHostKeyChecking=no'​
     ansible_ssh_user:​ vagrant     ansible_ssh_user:​ vagrant
     ansible_ssh_pass:​ strongpassword     ansible_ssh_pass:​ strongpassword
Line 805: Line 806:
 </​code><​code>​ </​code><​code>​
 ~/openvpn1# ansible-playbook openvpn1.yaml -i inventory3.yaml -e "​variable_host=test_nodes"​ ~/openvpn1# ansible-playbook openvpn1.yaml -i inventory3.yaml -e "​variable_host=test_nodes"​
 +</​code>​
 +
 +==== Ansible и SOPS ====
 +
 +  * [[https://​galaxy.ansible.com/​ui/​repo/​published/​community/​sops/​|galaxy.ansible community.sops]]
 +
 +  * [[Mozilla Sops]]
 +
 +<​code>​
 +# ansible-galaxy collection list | grep sops
 +community.sops ​               1.6.2
 +
 +~/openvpn1# sops encrypt openvpn1/​files/​server.key -i
 +
 +~/openvpn1# cat openvpn1/​tasks/​main.yml
 +...
 +- name: Copy file server.key
 +  copy:
 +    #src: server.key
 +    content: "{{ lookup('​community.sops.sops',​ '​server.key'​) }}"
 +...
 +
 +~/openvpn1# sops exec-file --no-fifo inventory.yaml '​ansible-playbook openvpn1.yaml -i {}'
 </​code>​ </​code>​
 ==== Фрагмент роли с условиями и отладкой ==== ==== Фрагмент роли с условиями и отладкой ====
сервис_ansible.1768750574.txt.gz · Last modified: 2026/01/18 18:36 by val