Lqvan exercise ch05 encrypt thesensitivedata yml

ch4-role/lqvan/ansible.cfg

@@ -0,0 +1,3 @@
+[defaults]
+host_key_checking = False
+inventory = inventory

ch4-role/lqvan/inventory/group_vars/all/vault

@@ -0,0 +1,7 @@
+$ANSIBLE_VAULT;1.1;AES256
+34393735656566316665386233383161323436313364616234623264396231626262343366323034
+3361316165363665623433303532363737356531653964390a623436666238323461353436666131
+66383362316537346239316130613331653530323138356438393330643538303432373235343031
+3865373035616536390a353034663334333262613739383361343136636133663563643164626231
+32666633306665316261396665376430373634346334356637643239613233643530303062366662
+3237393635386630343263363438626439383864396437613237

ch4-role/lqvan/inventory/group_vars/ubuntu.yaml

@@ -0,0 +1 @@
+ansible_python_interpreter: /usr/bin/python3

ch4-role/lqvan/inventory/hosts

@@ -0,0 +1,13 @@
+[ubuntu]
+ubuntu11 ansible_host=192.168.100.11
+ubuntu12 ansible_host=192.168.100.12
+
+[centos]
+centos21 ansible_host=192.168.100.21
+centos22 ansible_host=192.168.100.22
+
+
+[linux:children]
+ubuntu
+centos
+

ch4-role/lqvan/roles/apache2/.travis.yml

@@ -0,0 +1,29 @@
+---
+language: python
+python: "2.7"
+
+# Use the new container infrastructure
+sudo: false
+
+# Install ansible
+addons:
+  apt:
+    packages:
+    - python-pip
+
+install:
+  # Install ansible
+  - pip install ansible
+
+  # Check ansible version
+  - ansible --version
+
+  # Create ansible.cfg with correct roles_path
+  - printf '[defaults]\nroles_path=../' >ansible.cfg
+
+script:
+  # Basic role syntax check
+  - ansible-playbook tests/test.yml -i tests/inventory --syntax-check
+
+notifications:
+  webhooks: https://galaxy.ansible.com/api/v1/notifications/

ch4-role/lqvan/roles/apache2/README.md

@@ -0,0 +1,38 @@
+Role Name
+=========
+
+apache2
+
+Requirements
+------------
+
+N/A.
+
+Role Variables
+--------------
+
+foo:  var for testing
+
+Dependencies
+------------
+
+N/A
+
+Example Playbook
+----------------
+
+Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
+
+    - hosts: all
+      roles:
+         - apache2
+
+License
+-------
+
+BSD
+
+Author Information
+------------------
+
+An optional section for the role authors to include contact information, or a website (HTML is not allowed).

ch4-role/lqvan/roles/apache2/defaults/main.yml

@@ -0,0 +1,6 @@
+---
+# defaults file for apache2
+welcome_user: lqvan
+apache:
+  Debian: apache2
+  RedHat: httpd

ch4-role/lqvan/roles/apache2/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+# handlers file for apache2
+- name: Restart Apache
+  service:
+    name: "{{ apache[ansible_os_family] }}"
+    state: restarted

ch4-role/lqvan/roles/apache2/meta/main.yml

@@ -0,0 +1,62 @@
+galaxy_info:
+  author: Van LQ
+  description: Install Apache 2
+  company: your company (optional)
+
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+
+  # Choose a valid license ID from https://spdx.org - some suggested licenses:
+  # - BSD-3-Clause (default)
+  # - MIT
+  # - GPL-2.0-or-later
+  # - GPL-3.0-only
+  # - Apache-2.0
+  # - CC-BY-4.0
+  license: license (GPL-2.0-or-later, MIT, etc)
+
+  min_ansible_version: "2.9"
+
+  # If this a Container Enabled role, provide the minimum Ansible Container version.
+  # min_ansible_container_version:
+
+  #
+  # Provide a list of supported platforms, and for each platform a list of versions.
+  # If you don't wish to enumerate all versions for a particular platform, use 'all'.
+  # To view available platforms and versions (or releases), visit:
+  # https://galaxy.ansible.com/api/v1/platforms/
+  #
+  # platforms:
+  # - name: Fedora
+  #   versions:
+  #   - all
+  #   - 25
+  # - name: SomePlatform
+  #   versions:
+  #   - all
+  #   - 1.0
+  #   - 7
+  #   - 99.99
+
+  platforms:
+    - name: "EL"
+      versions:
+      - "7"
+    - name: "Ubuntu"
+      versions:
+      - "bionic"
+
+
+  galaxy_tags: []
+    # List tags for your role here, one per line. A tag is a keyword that describes
+    # and categorizes the role. Users find roles by searching for tags. Be sure to
+    # remove the '[]' above, if you add tags to this list.
+    #
+    # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+    #       Maximum 20 tags per role.
+
+dependencies: []
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.
+

ch4-role/lqvan/roles/apache2/tasks/install.yml

@@ -0,0 +1,36 @@
+---
+# tasks file for install apache2
+- name: Install Apache
+  package:
+    name: "{{ item }}"
+    state: latest
+  with_items: 
+    - "{{ apache[ansible_os_family] }}" 
+    - php
+    - php-mysql
+    - php-common
+
+- name: Configuring service
+  service:
+    name: "{{ apache[ansible_os_family] }}"
+    state: restarted
+    enabled: yes
+
+- name: Copy welcome page
+  template:
+    # src: "templates/index.php.j2"
+    src: "../templates/index.php.j2"
+    dest: "/var/www/html/index.php"
+  # notify: Restart Apache
+
+# - name: Force all notified handlers to run at this point, not waiting for normal sync points
+#   meta: flush_handlers
+
+- name: Check the welcome page
+  shell: curl http://"{{ ansible_host }}/index.php"
+  # delegate_to: localhost
+  register: result
+
+- name: Display welcome page
+  debug:
+    msg: "{{ result.stdout_lines }}"

ch4-role/lqvan/roles/apache2/tasks/main.yml

@@ -0,0 +1,4 @@
+---
+# tasks for apache2
+- include: install.yml
+- include: uninstall.yml

ch4-role/lqvan/roles/apache2/tasks/uninstall.yml

@@ -0,0 +1,32 @@
+---
+# tasks file for uninstall apache2
+- name: Disabled service
+  service:
+    name: "{{ apache[ansible_os_family] }}"
+    state: stopped
+    enabled: no
+
+- name: Uninstall Apache
+  package:
+    name: "{{ item }}"
+    state: absent
+  with_items: 
+    - "{{ apache[ansible_os_family] }}" 
+    - php
+    - php-mysql
+    - php-common
+
+- name: Remove welcome page
+  file:
+    path: "{{ item }}"
+    state: absent
+  with_items:
+  - "/var/www/html/index.php"
+
+- name: Check exist Index PHP File
+  shell: ls "/var/www/html"
+  register: result
+
+- name: Display Result
+  debug:
+    msg: "{{ result.stdout_lines }}"

ch4-role/lqvan/roles/apache2/templates/index.php.j2

@@ -0,0 +1,10 @@
+<html>
+   <head>
+       <title>Hello {{ welcome_user }} !</title>
+   </head>
+   <body>
+       <h1>Hello <?php echo {{ welcome_user }} ;?>, apache is working!</h1>
+       <p>I am <?php echo {{ welcome_user }} ;?> </p>
+       <p>My password is <?php echo {{ vault_ansible_password }} ;?> </p>
+   </body>
+</html>

ch4-role/lqvan/roles/apache2/tests/inventory

@@ -0,0 +1,2 @@
+localhost
+

ch4-role/lqvan/roles/apache2/tests/test.yml

@@ -0,0 +1,5 @@
+---
+- hosts: localhost
+  remote_user: root
+  roles:
+    - apache2

ch4-role/lqvan/roles/apache2/vars/main.yml

@@ -0,0 +1,2 @@
+---
+# vars file for apache2

ch4-role/lqvan/site.yml

@@ -0,0 +1,30 @@
+# site.yml
+---
+- name: Setup and Uninstall Apache web server
+  hosts: all
+  gather_facts: yes
+  become: yes
+
+  vars_files:
+    - roles/apache2/defaults/main.yml
+
+  tasks:
+    - include: "roles/apache2/tasks/install.yml"
+      when: ("{{ run_option }}" == "install")
+
+    - include: "roles/apache2/tasks/uninstall.yml"
+      when: ("{{ run_option }}" == "uninstall")
+
+  #  - name: Setup Apache using role
+  #    import_role:
+  #      name: apache2
+
+  #  - name: Check the welcome page
+  #   #  shell: curl http://"{{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }}"
+  #    shell: curl http://"{{ ansible_host }}/index.php"
+  #    delegate_to: localhost
+  #    register: result
+
+  #  - name: Display welcome page
+  #    debug:
+  #      msg: "{{ result.stdout_lines }}"