92b2a9d609
- Move all roles from playbooks/roles/ to roles/ - Update roles_path in ansible.cfg - Add cast user to common role - Create standalone podman role - Add semaphore role with Podman + Quadlet support
47 lines
1.0 KiB
YAML
47 lines
1.0 KiB
YAML
---
|
|
# Role to install and configure an Chrony NTP server
|
|
|
|
- name: 1. Install Chrony NTP for time synchronization
|
|
become: true
|
|
ansible.builtin.dnf:
|
|
name: chrony
|
|
state: present
|
|
|
|
- name: 2.1 Remove DHCP NTP servers from config
|
|
become: true
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/chrony.conf
|
|
line: "server unifi.int.mk-labs.cloud iburst"
|
|
state: absent
|
|
|
|
- name: 2.2 Ensure specific NTP servers are present
|
|
become: true
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/chrony.conf
|
|
line: "server {{ item }} iburst"
|
|
state: present
|
|
loop: "{{ ntp_servers }}"
|
|
|
|
- name: 3. Ensure network allowed are present
|
|
become: true
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/chrony.conf
|
|
line: "allow {{ item }}"
|
|
state: present
|
|
loop: "{{ allowed_networks }}"
|
|
|
|
- name: 4.Restart ntpd service
|
|
become: true
|
|
ansible.builtin.systemd:
|
|
name: chronyd
|
|
state: restarted
|
|
enabled: true
|
|
|
|
- name: 5. Allow NTP traffic
|
|
become: true
|
|
ansible.posix.firewalld:
|
|
service: ntp
|
|
permanent: true
|
|
immediate: true
|
|
state: enabled
|