Skip to content

Commit

Permalink
Merge pull request #72 from Oefenweb/cs-fixes
Browse files Browse the repository at this point in the history
Make use of fully-qualified collection name
  • Loading branch information
tersmitten authored May 20, 2022
2 parents 6e1e729 + 8022c0d commit 4a74de4
Show file tree
Hide file tree
Showing 7 changed files with 33 additions and 23 deletions.
7 changes: 3 additions & 4 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,9 @@ jobs:
python-version: '3.x'

- name: Install test dependencies
run: pip install ansible-lint[community,yamllint]
run: |
pip install ansible-lint
ansible-galaxy install -r requirements.yml
- name: Lint code
run: |
Expand All @@ -43,11 +45,8 @@ jobs:
matrix:
include:
- distro: debian8
ansible-version: '<2.10'
- distro: debian9
- distro: debian10
- distro: ubuntu1604
ansible-version: '>=2.9, <2.10'
- distro: ubuntu1604
ansible-version: '>=2.10, <2.11'
- distro: ubuntu1604
Expand Down
13 changes: 8 additions & 5 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,17 +1,20 @@
FROM ubuntu:16.04
FROM ubuntu:18.04
MAINTAINER Mischa ter Smitten <[email protected]>

ENV LANG C.UTF-8
ENV LC_ALL C.UTF-8

# python
RUN apt-get update && \
DEBIAN_FRONTEND=noninteractive apt-get install -y python-minimal python-dev curl && \
DEBIAN_FRONTEND=noninteractive apt-get install -y python3-minimal python3-dev curl && \
apt-get clean
RUN curl -sL https://bootstrap.pypa.io/pip/2.7/get-pip.py | python -
RUN curl -sL https://bootstrap.pypa.io/pip/3.6/get-pip.py | python3 -
RUN rm -rf $HOME/.cache

# ansible
RUN DEBIAN_FRONTEND=noninteractive apt-get install -y gcc libffi-dev libssl-dev && \
RUN DEBIAN_FRONTEND=noninteractive apt-get install -y python3-apt && \
apt-get clean
RUN pip install ansible==2.9.15
RUN pip3 install ansible==2.10.7
RUN rm -rf $HOME/.cache

# provision
Expand Down
2 changes: 1 addition & 1 deletion handlers/main.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# handlers file
---
- name: restart fail2ban
service:
ansible.builtin.service:
name: fail2ban
state: restarted
when: service_default_state | default('started') == 'started'
5 changes: 2 additions & 3 deletions meta/main.yml
Original file line number Diff line number Diff line change
@@ -1,13 +1,12 @@
# meta file
---
galaxy_info:
namespace: oefenweb
author: oefenweb
role_name: fail2ban
author: Mischa ter Smitten
company: Oefenweb.nl B.V.
description: Set up fail2ban in Debian-like systems
license: MIT
min_ansible_version: 2.9.0
min_ansible_version: 2.10.0
platforms:
- name: Ubuntu
versions:
Expand Down
6 changes: 6 additions & 0 deletions molecule/default/collections.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
---
collections:
- name: community.docker
version: '>=1.2.0,<2'
- name: community.general
version: '>=2,<3'
3 changes: 3 additions & 0 deletions requirements.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
# requirements file
---
collections: []
20 changes: 10 additions & 10 deletions tasks/main.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# tasks file
---
- name: install
apt:
ansible.builtin.apt:
name: "{{ fail2ban_dependencies }}"
state: "{{ apt_install_state | default('latest') }}"
update_cache: true
Expand All @@ -12,7 +12,7 @@
- fail2ban-install

- name: get fail2ban version
command: >
ansible.builtin.command: >
fail2ban-server -V
changed_when: false
register: _fail2ban_version_raw
Expand All @@ -22,7 +22,7 @@
- fail2ban-install

- name: register fail2ban version
set_fact:
ansible.builtin.set_fact:
fail2ban_version: "{{ _fail2ban_version_raw.stdout | regex_search('([0-9]+\\.[0-9]+\\.[0-9]+)') }}"
changed_when: false
tags:
Expand All @@ -31,7 +31,7 @@
- fail2ban-install

- name: remove configuration file - /etc/fail2ban/jail.d/defaults-debian.conf
file:
ansible.builtin.file:
state: absent
path: /etc/fail2ban/jail.d/defaults-debian.conf
notify: restart fail2ban
Expand All @@ -42,7 +42,7 @@
- fail2ban-configuration-delete

- name: update configuration file - /etc/fail2ban/fail2ban.local
template:
ansible.builtin.template:
src: etc/fail2ban/fail2ban.local.j2
dest: /etc/fail2ban/fail2ban.local
owner: root
Expand All @@ -56,7 +56,7 @@
- fail2ban-configuration-update

- name: update configuration file - /etc/fail2ban/jail.local
template:
ansible.builtin.template:
src: etc/fail2ban/jail.local.j2
dest: /etc/fail2ban/jail.local
owner: root
Expand All @@ -70,7 +70,7 @@
- fail2ban-configuration-update

- name: copy filters
copy:
ansible.builtin.copy:
src: "{{ fail2ban_filterd_path }}"
dest: /etc/fail2ban/filter.d/
owner: root
Expand All @@ -84,7 +84,7 @@
- fail2ban-filters

- name: copy actions
copy:
ansible.builtin.copy:
src: "{{ fail2ban_actiond_path }}"
dest: /etc/fail2ban/action.d/
owner: root
Expand All @@ -98,7 +98,7 @@
- fail2ban-actions

- name: copy jails
copy:
ansible.builtin.copy:
src: "{{ fail2ban_jaild_path }}"
dest: /etc/fail2ban/jail.d/
owner: root
Expand All @@ -112,7 +112,7 @@
- fail2ban-jails

- name: start and enable service
service:
ansible.builtin.service:
name: fail2ban
state: "{{ service_default_state | default('started') }}"
enabled: "{{ service_default_enabled | default(true) | bool }}"
Expand Down

0 comments on commit 4a74de4

Please sign in to comment.