61 lines
1.2 KiB
YAML
61 lines
1.2 KiB
YAML
---
|
|
- name: Install zabbix
|
|
hosts:
|
|
- vm-zabbix
|
|
# - vm-zabbix-db
|
|
roles:
|
|
- firewall
|
|
- chrony
|
|
- zabbix-agent2
|
|
vars:
|
|
firewall:
|
|
# - previous: replaced # flush previous rules
|
|
|
|
- zone: internal
|
|
state: enabled
|
|
permanent: true
|
|
service:
|
|
- ssh
|
|
- zabbix-agent
|
|
- ntp
|
|
- dns
|
|
- http
|
|
- https
|
|
port:
|
|
- '10050/tcp'
|
|
- '8080/tcp'
|
|
- '3000/tcp'
|
|
source:
|
|
- 10.200.0.0/16
|
|
- 10.202.0.0/16
|
|
- 10.203.0.0/16
|
|
- 91.218.87.192/26
|
|
|
|
- zone: internal
|
|
state: disabled
|
|
permanent: true
|
|
service:
|
|
- cockpit
|
|
- dhcpv6-client
|
|
- mdns
|
|
- samba-client
|
|
|
|
- set_default_zone: internal
|
|
state: enabled
|
|
permanent: true
|
|
|
|
- interface: ens192
|
|
zone: internal
|
|
state: enabled
|
|
permanent: true
|
|
|
|
###### chrony-client ######
|
|
chrony_disable_ntpd: true
|
|
chrony_enable: true
|
|
# Moved to inventory vars
|
|
agent_package_state: present
|
|
agent_param_server:
|
|
- 127.0.0.1
|
|
agent_param_serveractive:
|
|
- 127.0.0.1
|