diff --git a/debian_fullserver_web.yml b/debian_fullserver_web.yml new file mode 100644 index 0000000..c7b8057 --- /dev/null +++ b/debian_fullserver_web.yml @@ -0,0 +1,149 @@ +- hosts: server_web + vars: + user: "smauro" + root_password: "testtest" + tasks: + # 1. Passer à root et installer sudo (si pas déjà installé) + - name: Passer à root et installer sudo + become: yes + become_user: root + become_method: su + command: apt install sudo -y + vars: + ansible_become_pass: "{{ root_password }}" + register: result + when: ansible_facts.packages['sudo'] is not defined + + - name: Afficher le résultat de l'installation de sudo + debug: + var: result + + # 2. Ajouter l'utilisateur au groupe sudo + - name: Ajouter l'utilisateur au groupe sudo + user: + name: "{{ user }}" + groups: sudo + append: yes + become: yes + become_user: root + when: ansible_facts.packages['sudo'] is defined + + # 3. Modifier le fichier sources.list + - name: Modifier le fichier sources.list + copy: + dest: /etc/apt/sources.list + content: | + deb http://deb.debian.org/debian/ bookworm main non-free-firmware + deb-src http://deb.debian.org/debian/ bookworm main non-free-firmware + + deb http://security.debian.org/debian-security bookworm-security main non-free-firmware + deb-src http://security.debian.org/debian-security bookworm-security main non-free-firmware + + # bookworm-updates, to get updates before a point release is made; + # see https://www.debian.org/doc/manuals/debian-reference/ch02.en.html#_updates_and_backports + deb http://deb.debian.org/debian/ bookworm-updates main non-free-firmware + deb-src http://deb.debian.org/debian/ bookworm-updates main non-free-firmware + become: yes + + # 4. Mettre à jour les paquets + - name: Mettre à jour les paquets + apt: + update_cache: yes + become: yes + + # 5. Configurer le hostname + - name: Configurer le hostname + hostname: + name: "Gitea" + become: yes + + # 6. Changer le mot de passe root + - name: Changer le mot de passe root + user: + name: root + password: "{{ root_password | password_hash('sha512') }}" + become: yes + + # 7. Configurer l'utilisateur smauro + - name: Configurer l'utilisateur smauro + user: + name: "{{ user }}" + password: "{{ root_password | password_hash('sha512') }}" + shell: /bin/bash + groups: sudo + state: present + become: yes + + - name: Installer les paquets nécessaires + apt: + name: ["sudo", "vim", "curl", "git", "htop", "gnupg", "apache2"] + state: present + become: yes + + # 8. Ajouter le dépôt Sury pour PHP 8.3 + #- name: Ajouter le dépôt Sury pour PHP 8.3 + #shell: echo "deb https://packages.sury.org/php/ bookworm main" | tee /etc/apt/sources.list.d/sury-php.list + #become: yes + + # 9. Ajouter la clé GPG du dépôt Sury + #- name: Ajouter la clé GPG du dépôt Sury via apt_key + # apt_key: + #url: https://packages.sury.org/php/apt.gpg + #state: present + #become: yes + + - name: Mettre à jour et upgrader le système + apt: + update_cache: yes + upgrade: dist + become: yes + + # 10. Installer PHP 8.3 et ses extensions + - name: Installer PHP 8.3 et modules requis + apt: + name: + - php8.3-cli + - php8.3-fpm + - php8.3-common + - php8.3-mbstring + - php8.3-xml + - php8.3-curl + - php8.3-zip + - php8.3-gd + - php8.3-mysql + state: present + become: yes + + - name: Redémarrer PHP 8.3-FPM + systemd: + name: php8.3-fpm + state: restarted + become: yes + + # 11. Configurer Apache avec PHP 8.3 + #- name: Activer PHP 8.3 dans Apache + #command: a2enmod php8.3 + #become: yes + + - name: Redémarrer Apache + systemd: + name: apache2 + state: restarted + become: yes + + - name: Activer les modules rewrite et expires dans Apache + command: a2enmod rewrite expires + become: yes + + - name: Redémarrer Apache après activation des modules + systemd: + name: apache2 + state: restarted + become: yes + + - name: Redémarrer la machine + reboot: + msg: "Redémarrage après configuration." + pre_reboot_delay: 5 + become: yes + diff --git a/inventory.ini b/inventory.ini new file mode 100644 index 0000000..5ac9de4 --- /dev/null +++ b/inventory.ini @@ -0,0 +1,5 @@ +[debian_vm] +192.168.1.34 ansible_user=smauro ansible_ssh_pass=testtest + +[server_web] +192.168.1.11 ansible_user=root ansible_ssh_pass=testtest