{"id":3914,"sha1":"2aa592f59e53da80ca122f66ddfd2d5e2f6ac53e","playbook":{"id":1973,"items":{"plays":1,"tasks":6,"results":6,"hosts":1,"files":1,"records":0},"arguments":{"version":null,"verbosity":2,"private_key_file":"/home/ssh-gateway/.ssh/id_rsa","remote_user":"root","connection":"ssh","timeout":null,"ssh_common_args":null,"sftp_extra_args":null,"scp_extra_args":null,"ssh_extra_args":null,"ask_pass":false,"connection_password_file":null,"force_handlers":false,"flush_cache":false,"become":false,"become_method":"sudo","become_user":null,"become_ask_pass":false,"become_password_file":null,"tags":["all"],"skip_tags":[],"check":false,"diff":false,"inventory":["/home/ssh-gateway/ansible/kuly/bash-kvm-inventory-dev.sh"],"listhosts":false,"subset":"ns1-test.man-1.solus.stage.town","extra_vars":"Not saved by ARA as configured by 'ignored_arguments'","vault_ids":[],"ask_vault_pass":false,"vault_password_files":[],"forks":20,"module_path":null,"syntax":false,"listtasks":false,"listtags":false,"step":false,"start_at_task":null,"args":["install_superDNS.yaml"]},"labels":[{"id":1,"name":"remote_user:root"},{"id":2,"name":"check:False"},{"id":3,"name":"tags:all"},{"id":126,"name":"subset:ns1-test.man-1.solus.stage.town"}],"started":"2024-09-18T10:19:53.202971+01:00","ended":"2024-09-18T10:21:07.901519+01:00","duration":"00:01:14.698548","name":null,"ansible_version":"2.16.11","client_version":"1.7.2","python_version":"3.10.10","server_version":"1.7.2","status":"completed","path":"/home/ssh-gateway/ansible/kuly/install_superDNS.yaml","controller":"ssh-gw-4.layershift.com","user":"root"},"content":"---\n- name: Playbook to install SuperDNS PDNS on alma8\n  hosts: all\n  gather_facts: false\n  tasks:\n    - name: Add firewall rules\n      ansible.builtin.shell: |\n        set -o pipefail\n        iptables -A INPUT -p udp -m udp --dport 53 -j ACCEPT\n        iptables -A INPUT -p udp -m udp --sport 53 -j ACCEPT\n        iptables -A INPUT -p tcp -m tcp --dport 53 -j ACCEPT\n        iptables -A INPUT -p tcp -m tcp --sport 53 -j ACCEPT\n        iptables -A INPUT -s 127.0.0.1 -p tcp -m tcp --dport 8081 -j ACCEPT\n      args:\n        executable: /bin/bash\n      changed_when: false\n\n    - name: Install prerequisite packages\n      ansible.builtin.dnf:\n        name:\n          - epel-release\n          - vim\n          - wget\n          - net-tools\n          - bind-utils\n        state: latest\n\n    - name: Install MariaDB\n      ansible.builtin.shell: |\n        set -o pipefail\n        dnf -y module reset mariadb\n        dnf -y module install mariadb:10.11\n        systemctl restart mariadb; systemctl enable mariadb\n      args:\n        executable: /bin/bash\n      changed_when: false\n\n    - name: Secure MariaDB installation\n      ansible.builtin.shell: |\n        set -o pipefail\n        my_root_pass=`pwgen -s 20 | head -1`\n        cat > /root/mysql_secure_install.sql << EOF\n        ALTER USER 'root'@'localhost' IDENTIFIED BY '$my_root_pass';\n        DELETE FROM mysql.user WHERE User='';\n        DELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1');\n        DROP DATABASE IF EXISTS test;\n        DELETE FROM mysql.db WHERE Db='test' OR Db='test\\\\_%';\n        FLUSH PRIVILEGES;\n        EOF\n        mysql -sfu root < /root/mysql_secure_install.sql; rm -f /root/mysql_secure_install.sql\n        echo -e \"[mysql]\\nuser=\\\"root\\\"\\npassword=\\\"$my_root_pass\\\"\" > /root/.my.cnf\n      args:\n        executable: /bin/bash\n      changed_when: false\n\n    - name: Install pdns packages\n      ansible.builtin.dnf:\n        name:\n          - pdns\n          - pdns-backend-mysql\n          - pdns-tools\n        state: latest\n    - name: Create powertdns database\n      ansible.builtin.shell: |\n        set -o pipepfail\n        mysql -e \"CREATE DATABASE powerdns\"\n        mysql -e \"CREATE USER 'powerdns'@'localhost' IDENTIFIED BY 'Lu6B1jvVEFvU'\"\n        mysql -e \"GRANT ALL PRIVILEGES ON powerdns.* TO 'powerdns'@'localhost'\"\n        mysql -e \"flush privileges\"\n        mysql powerdns < /usr/share/doc/pdns-backend-mysql/schema.mysql.sql\n      args:\n        executable: /bin/bash\n      changed_when: false\n","created":"2024-09-18T10:19:53.229143+01:00","updated":"2024-09-18T10:19:53.229177+01:00","path":"/home/ssh-gateway/ansible/kuly/install_superDNS.yaml"}