106 lines
2.7 KiB
YAML
Executable File
106 lines
2.7 KiB
YAML
Executable File
---
|
|
- name: install requirements for mariadb
|
|
apt:
|
|
update_cache: yes
|
|
state: "{% if cloud_update | bool %}latest{% else %}present{% endif %}"
|
|
install_recommends: yes
|
|
pkg:
|
|
- apt-transport-https
|
|
- software-properties-common
|
|
- gpg
|
|
- gpg-agent
|
|
|
|
- name: install mariadb repository key
|
|
apt_key:
|
|
url: https://mariadb.org/mariadb_release_signing_key.asc
|
|
state: present
|
|
|
|
- name: install mariadb repository
|
|
apt_repository:
|
|
repo: "deb [arch={{ ansible_kernel.split('-')[-1] }}] https://archive.mariadb.org/mariadb-{{ mariadb_version }}/repo/debian/ {{ ansible_distribution_release }} main"
|
|
state: present
|
|
|
|
- name: setup mariadb config path
|
|
file:
|
|
state: directory
|
|
path: "{{ mariadb_config_location }}"
|
|
when: mariadb_config_location != "/etc"
|
|
|
|
- name: configure mariadb
|
|
template:
|
|
mode: 0644
|
|
src: "etc/my.cnf.j2"
|
|
dest: "{{ mariadb_config_location }}/my.cnf"
|
|
owner: root
|
|
notify: restart mariadb service
|
|
|
|
- name: install mariadb
|
|
apt:
|
|
update_cache: yes
|
|
state: "{% if cloud_update | bool %}latest{% else %}present{% endif %}"
|
|
install_recommends: yes
|
|
pkg:
|
|
- mariadb-server
|
|
- python3-pymysql
|
|
register: mdb_install
|
|
|
|
- name: create mariadb storage
|
|
file:
|
|
state: directory
|
|
path: "{{ item }}"
|
|
owner: root
|
|
group: mysql
|
|
mode: 0770
|
|
loop:
|
|
- "{{ mariadb_storage_folder }}"
|
|
- "{{ mariadb_backup_folder}}"
|
|
|
|
- name: setup mariadb service
|
|
service:
|
|
name: mariadb
|
|
enabled: true
|
|
state: started
|
|
|
|
# This should only run when initially installed
|
|
- name: initial setup mariadb root user
|
|
mysql_user:
|
|
check_implicit_admin: yes
|
|
name: "{{ mariadb_root_user }}"
|
|
password: "{{ mariadb_root_pass }}"
|
|
priv: '*.*:ALL,GRANT'
|
|
login_unix_socket: "{{ mariadb_local_sock }}"
|
|
when: mdb_install.changed
|
|
|
|
- name: setup sql secrets file for root
|
|
template:
|
|
mode: 0600
|
|
src: root/.my.cnf.j2
|
|
dest: /root/.my.cnf
|
|
|
|
- name: setup initial cleanup script
|
|
template:
|
|
mode: 0600
|
|
src: root/secure_install.sql.j2
|
|
dest: /root/secure_install.sql
|
|
|
|
- name: run initial cleanup
|
|
shell: |
|
|
mysql
|
|
--defaults-extra-file /root/mdb_local.cnf
|
|
--no-auto-rehash
|
|
< /root/secure_install.sql
|
|
when: mdb_install.changed
|
|
|
|
- name: remove all anonymous user accounts
|
|
mysql_user:
|
|
name: ""
|
|
host_all: yes
|
|
state: absent
|
|
login_unix_socket: "{{ mariadb_local_sock }}"
|
|
|
|
- name: Setup databases based on mariadb conf
|
|
include_tasks: setup-db.yml
|
|
loop: "{{ db_configs | json_query('[?type==`mariadb`]') }}"
|
|
loop_control:
|
|
loop_var: db
|
|
label: "{% if 'dbname' in db %}{{ db.dbname }}{% elif 'dbuser' in db %}{{ db.dbuser }}{% else %}::pass_redacted::{% endif %}" |