influxdb.yml

---
- hosts: influxdb
  name: InfluxDB
  become: true
  vars:
    hostname: influxdb.galaxyproject.eu
  vars_files:
    - "secret_group_vars/all.yml"
  pre_tasks:
    - name: Install Dependencies
      become: true
      ansible.builtin.package:
        name: ['python3-virtualenv', 'python3-docker']
    - name: Configure SELinux
      ansible.posix.seboolean:
        name: "{{ item }}"
        state: true
        persistent: true
      loop:
        - httpd_can_network_connect
    - name: Create influxdb firewalld service
      ansible.builtin.copy:
        dest: /etc/firewalld/services/influxdb.xml
        content: |
          <?xml version="1.0" encoding="utf-8"?>
          <service>
          <short>influxdb</short>
            <description>Time-series database for storing metrics and analytics data</description>
            <port protocol="tcp" port="8086"/>
          </service>
        mode: "0600"
        owner: root
        group: root
      notify: copied_service
  handlers:
    - name: Reload Firewalld
      listen: copied_service
      ansible.builtin.service:
        name: firewalld
        state: reloaded
  collections:
    - devsec.hardening
  roles:
    ## Starting configuration of the operating system
    - role: usegalaxy_eu.firewall
      become: true
    - role: usegalaxy_eu.handy.os_setup
      vars:
        enable_hostname: true
        enable_powertools: true        # geerlingguy.repo-epel role doesn't enable PowerTools repository
        enable_remap_user: true
        enable_create_user: true
    - geerlingguy.repo-epel     # Install EPEL repository
    - usegalaxy-eu.autoupdates  # keep all of our packages up to date
    - influxdata.chrony         # Keep our time in sync.
    - usegalaxy-eu.dynmotd
    - hxr.monitor-email
#    # Applications
    - geerlingguy.docker
    - galaxyproject.nginx
    - usegalaxy_eu.influxdbserver
    - dj-wasabi.telegraf
    # hardening
    - os_hardening
    - ssh_hardening