68 lines
1.8 KiB
YAML
68 lines
1.8 KiB
YAML
---
|
|
- name: Kernel Tuning
|
|
ansible.builtin.include_tasks: kernel_tune.yml
|
|
|
|
- name: TCP/UDP Tuning
|
|
ansible.builtin.include_tasks: tcp_tune.yml
|
|
|
|
- name: IP ip_spoofing
|
|
ansible.builtin.include_tasks: ip_spoofing.yml
|
|
|
|
- name: IP Forwarding
|
|
ansible.builtin.include_tasks: ip_forward.yml
|
|
|
|
- name: Проверить, загружен ли модуль br_netfilter
|
|
ansible.builtin.stat:
|
|
path: /sys/module/br_netfilter
|
|
register: br_netfilter_status
|
|
|
|
- name: IP Bridge
|
|
ansible.builtin.include_tasks: ip_bridge.yml
|
|
when: br_netfilter_status.stat.exists
|
|
|
|
# - name: Deploy kernel_tune.conf
|
|
# ansible.builtin.template:
|
|
# src: kernel_tune.conf.j2
|
|
# dest: /etc/sysctl.d/kernel_tune.conf
|
|
# mode: "0644"
|
|
# - name: Deploy tcp_tune.conf
|
|
# ansible.builtin.template:
|
|
# src: tcp_tune.conf.j2
|
|
# dest: /etc/sysctl.d/tcp_tune.conf
|
|
# mode: "0644"
|
|
# - name: Deploy ip_spoofing.conf
|
|
# ansible.builtin.template:
|
|
# src: ip_spoofing.conf.j2
|
|
# dest: /etc/sysctl.d/ip_spoofing.conf
|
|
# mode: "0644"
|
|
# - name: Deploy ip_forward.conf
|
|
# ansible.builtin.template:
|
|
# src: ip_forward.conf.j2
|
|
# dest: /etc/sysctl.d/ip_forward.conf
|
|
# mode: "0644"
|
|
# - name: Deploy ip_bridge.conf
|
|
# ansible.builtin.template:
|
|
# src: ip_bridge.conf.j2
|
|
# dest: /etc/sysctl.d/ip_bridge.conf
|
|
# mode: "0644"
|
|
# - name: Deploy httpd-tune.conf
|
|
# ansible.builtin.template:
|
|
# src: httpd-tune.conf.j2
|
|
# dest: /etc/sysctl.d/httpd-tune.conf
|
|
# mode: "0644"
|
|
# limit for using memory
|
|
|
|
- name: vm.overcommit_ratio
|
|
ansible.posix.sysctl:
|
|
name: vm.overcommit_ratio
|
|
value: 100
|
|
state: present
|
|
sysctl_file: /etc/sysctl.d/ip_httpd.conf
|
|
|
|
- name: vm.overcommit_memory
|
|
ansible.posix.sysctl:
|
|
name: vm.overcommit_memory
|
|
value: 2
|
|
state: present
|
|
sysctl_file: /etc/sysctl.d/ip_httpd.conf
|