63 lines
1.6 KiB
YAML
63 lines
1.6 KiB
YAML
---
|
|
- name: Find all files in /etc/sysctl.d
|
|
ansible.builtin.find:
|
|
paths: /etc/sysctl.d
|
|
recurse: true
|
|
file_type: any
|
|
register: files_to_delete
|
|
|
|
- name: Remove all files from /etc/sysctl.d
|
|
ansible.builtin.file:
|
|
path: "{{ item.path }}"
|
|
state: absent
|
|
loop: "{{ files_to_delete.files }}"
|
|
when: flush_sysctl_rules is true
|
|
|
|
- name: Disable Default sysctl.d
|
|
ansible.builtin.file:
|
|
path: /etc/sysctl.d/50-redhat.conf
|
|
state: touch
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
|
|
- name: Disable Default sysctl.d
|
|
ansible.builtin.file:
|
|
path: /etc/sysctl.d/50-default.conf
|
|
state: touch
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
|
|
- name: Kernel Tuning
|
|
ansible.builtin.include_tasks: kernel_tune.yml
|
|
|
|
- name: TCP/UDP Tuning
|
|
ansible.builtin.include_tasks: tcp_tune.yml
|
|
|
|
- name: IP Forwarding
|
|
ansible.builtin.include_tasks: ip_forward.yml
|
|
|
|
- name: Проверить, загружен ли модуль br_netfilter
|
|
ansible.builtin.stat:
|
|
path: /sys/module/br_netfilter
|
|
register: br_netfilter_status
|
|
|
|
- name: IP Bridge
|
|
ansible.builtin.include_tasks: ip_bridge.yml
|
|
when: br_netfilter_status.stat.exists
|
|
|
|
# Закоментировано, тк в некоторых случаях вызывает невозможность выделения памяти
|
|
# - name: Set vm.overcommit_ratio
|
|
# ansible.posix.sysctl:
|
|
# name: vm.overcommit_ratio
|
|
# value: 100
|
|
# state: present
|
|
# sysctl_file: /etc/sysctl.d/04-ip_httpd.conf
|
|
# - name: Set vm.overcommit_memory
|
|
# ansible.posix.sysctl:
|
|
# name: vm.overcommit_memory
|
|
# value: 2
|
|
# state: present
|
|
# sysctl_file: /etc/sysctl.d/04-ip_httpd.conf
|