diff options
| author | Carlos Konstanski <ckonstanski@pippiandcarlos.com> | 2017-10-16 12:18:12 -0600 |
|---|---|---|
| committer | Carlos Konstanski <ckonstanski@pippiandcarlos.com> | 2017-10-16 12:18:12 -0600 |
| commit | 817b789bb54b922d7fc983464fd31beeb4deb1dc (patch) | |
| tree | 3c6402654f2d47185ac03e717305e36db5125fa7 /salt/openbook/ansible | |
| parent | 10a5455b198d9b529dd30a55165e4136a6816277 (diff) | |
solve /dev/random locking; add cluster.interfaces to force ens3
Diffstat (limited to 'salt/openbook/ansible')
| -rw-r--r-- | salt/openbook/ansible/files/haveged.yaml | 36 | ||||
| -rw-r--r-- | salt/openbook/ansible/files/main.cf | 23 |
2 files changed, 59 insertions, 0 deletions
diff --git a/salt/openbook/ansible/files/haveged.yaml b/salt/openbook/ansible/files/haveged.yaml new file mode 100644 index 0000000..11b2371 --- /dev/null +++ b/salt/openbook/ansible/files/haveged.yaml @@ -0,0 +1,36 @@ +--- +- name: "Install haveged" + hosts: target + tasks: + - name: "Install haveged package" + apt: + pkg: "{{ item }}" + state: present + with_items: + - haveged + when: ansible_distribution == "Ubuntu" + + - name: "Install haveged package" + yum: + name: "{{ item }}" + state: present + with_items: + - haveged + when: ansible_distribution == "RedHat" or ansible_distribution == "CentOS" + + - name: "Install haveged package" + portage: + name: "{{ item }}" + state: present + with_items: + - sys-apps/haveged + when: ansible_distribution == "Gentoo" + + - name: "Enable haveged" + service: + name: "{{ item.name }}" + enabled: yes + state: started + runlevel: "{{ item.runlevel }}" + with_items: + - { name: haveged, runlevel: default } diff --git a/salt/openbook/ansible/files/main.cf b/salt/openbook/ansible/files/main.cf new file mode 100644 index 0000000..34253fc --- /dev/null +++ b/salt/openbook/ansible/files/main.cf @@ -0,0 +1,23 @@ +smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu) +biff = no +append_dot_mydomain = no +readme_directory = no + +smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem +smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key +smtpd_use_tls=yes +smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache +smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache + +smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination +myhostname = {{ }} +alias_maps = hash:/etc/aliases +alias_database = hash:/etc/aliases +myorigin = /etc/mailname +mydestination = verizoncloudplatform.com, $myhostname, localhost, localhost.localdomain, localhost +relayhost = 98.132.135.94 +mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 +mailbox_size_limit = 0 +recipient_delimiter = + +inet_interfaces = all +inet_protocols = all |