blob: b396d21693942a7355a61534c5dbef2b8e22fe94 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
# SPDX-FileCopyrightText: 2024 Matthew Fennell <matthew@fennell.dev>
#
# SPDX-License-Identifier: AGPL-3.0-only
---
- name: Ensure XMPP server is set up
hosts: xmpp_server
tasks:
- name: Ensure required packages are installed
ansible.builtin.package:
name:
- certbot
- prosody
- prosody-modules
- python3-certbot-apache
- ufw
state: present
- name: Ensure required ports are open
community.general.ufw:
rule: allow
name: "{{ item }}"
state: enabled
loop:
- OpenSSH
- WWW
- XMPP
become: true
- name: Ensure prosody is configured
ansible.builtin.copy:
src: "{{ playbook_dir }}/files/prosody.cfg.lua"
dest: /etc/prosody/prosody.cfg.lua
owner: root
group: root
mode: "0640"
become: true
- name: Ensure prosody config is reloaded
ansible.builtin.service:
name: prosody
enabled: true
state: reloaded
become: true
|
