This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_ansible [2026/02/03 16:59] val [Ansible и SOPS] |
сервис_ansible [2026/02/08 09:43] (current) val [Роль OpenVPN сервера] |
||
|---|---|---|---|
| Line 700: | Line 700: | ||
| vars: | vars: | ||
| X: "{{ ansible_eth1.ipv4.address.split('.')[2] }}" | X: "{{ ansible_eth1.ipv4.address.split('.')[2] }}" | ||
| + | #ansible_ssh_common_args: '-o StrictHostKeyChecking=no' | ||
| ansible_ssh_user: vagrant | ansible_ssh_user: vagrant | ||
| ansible_ssh_pass: strongpassword | ansible_ssh_pass: strongpassword | ||
| Line 810: | Line 811: | ||
| * [[https://galaxy.ansible.com/ui/repo/published/community/sops/|galaxy.ansible community.sops]] | * [[https://galaxy.ansible.com/ui/repo/published/community/sops/|galaxy.ansible community.sops]] | ||
| + | |||
| * [[Mozilla Sops]] | * [[Mozilla Sops]] | ||
| Line 815: | Line 817: | ||
| # ansible-galaxy collection list | grep sops | # ansible-galaxy collection list | grep sops | ||
| community.sops 1.6.2 | community.sops 1.6.2 | ||
| + | |||
| + | ~/openvpn1# sops encrypt openvpn1/files/server.key -i | ||
| + | |||
| + | ~/openvpn1# cat openvpn1/tasks/main.yml | ||
| + | ... | ||
| + | - name: Copy file server.key | ||
| + | copy: | ||
| + | #src: server.key | ||
| + | content: "{{ lookup('community.sops.sops', 'server.key') }}" | ||
| + | ... | ||
| + | |||
| + | ~/openvpn1# sops exec-file --no-fifo inventory.yaml 'ansible-playbook openvpn1.yaml -i {}' | ||
| </code> | </code> | ||
| ==== Фрагмент роли с условиями и отладкой ==== | ==== Фрагмент роли с условиями и отладкой ==== | ||