Felix Nehrke
f19a1f61c9
I'm oversaw completely, that I have to change the SSH-port for all nodes in the cluster otherwise I cannot provide a meaningful load-balancer for the git-ssh port in it. Additionally this allowed me to fix some config errors which I simply oversaw.
56 lines
1.5 KiB
YAML
56 lines
1.5 KiB
YAML
- name: Set facts for target SSH-connection
|
|
set_fact:
|
|
target_ansible_port: "{{ ansible_port }}"
|
|
|
|
- name: Check if SSH-connection is already adjusted
|
|
ping:
|
|
ignore_errors: "yes"
|
|
ignore_unreachable: "yes"
|
|
register: target_ssh
|
|
|
|
- name: Set ansible_port to 22 when SSH-connection is not adjusted
|
|
set_fact:
|
|
ansible_port: "22"
|
|
when: target_ssh.unreachable is defined and
|
|
target_ssh.unreachable == True
|
|
|
|
- name: Check if initial SSH-connection is active
|
|
ping:
|
|
when: target_ssh.unreachable is defined and
|
|
target_ssh.unreachable == True
|
|
|
|
- name: Set SSH-port to 1022
|
|
lineinfile:
|
|
path: /etc/ssh/sshd_config
|
|
regexp: '^#?\s*Port\s+[0-9]+$'
|
|
line: Port 1022
|
|
notify: "Restart sshd"
|
|
when: target_ssh.unreachable is defined and
|
|
target_ssh.unreachable == True
|
|
|
|
- name: Ensure SSH is reloaded
|
|
meta: flush_handlers
|
|
when: target_ssh.unreachable is defined and
|
|
target_ssh.unreachable == True
|
|
|
|
- name: Reset ansible_port to configured value
|
|
set_fact:
|
|
ansible_port: "{{ target_ansible_port }}"
|
|
when: target_ssh.unreachable is defined and
|
|
target_ssh.unreachable == True
|
|
|
|
- name: Run deferred setup to gather facts
|
|
setup:
|
|
|
|
- name: Ensure routable.d path to masquerade ips
|
|
file:
|
|
path: "{{ ip_masquerade_path }}"
|
|
state: directory
|
|
|
|
- name: Configure NAT to masquerade ips
|
|
template:
|
|
src: ip-masquerade.sh.j2
|
|
dest: "{{ ip_masquerade_path }}/{{ ip_masquerade_script }}"
|
|
mode: u=rwx,g=rx,o=rx
|
|
notify: "Start ip-masquerade"
|