init
This commit is contained in:
commit
f6dcc68093
|
@ -0,0 +1,29 @@
|
|||
---
|
||||
language: python
|
||||
python: "2.7"
|
||||
|
||||
# Use the new container infrastructure
|
||||
sudo: false
|
||||
|
||||
# Install ansible
|
||||
addons:
|
||||
apt:
|
||||
packages:
|
||||
- python-pip
|
||||
|
||||
install:
|
||||
# Install ansible
|
||||
- pip install ansible
|
||||
|
||||
# Check ansible version
|
||||
- ansible --version
|
||||
|
||||
# Create ansible.cfg with correct roles_path
|
||||
- printf '[defaults]\nroles_path=../' >ansible.cfg
|
||||
|
||||
script:
|
||||
# Basic role syntax check
|
||||
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
|
||||
|
||||
notifications:
|
||||
webhooks: https://galaxy.ansible.com/api/v1/notifications/
|
|
@ -0,0 +1,35 @@
|
|||
Cloudflared Ansible
|
||||
=========
|
||||
|
||||
Used for setting up and configuring cloudflared for pihole.
|
||||
|
||||
Requirements
|
||||
------------
|
||||
|
||||
Todo.
|
||||
|
||||
Dependencies
|
||||
------------
|
||||
|
||||
Todo.
|
||||
|
||||
Example Playbook
|
||||
----------------
|
||||
|
||||
Todo.
|
||||
|
||||
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
|
||||
|
||||
- hosts: servers
|
||||
roles:
|
||||
- { role: username.rolename, x: 42 }
|
||||
|
||||
License
|
||||
-------
|
||||
|
||||
BSD
|
||||
|
||||
Author Information
|
||||
------------------
|
||||
|
||||
An optional section for the role authors to include contact information, or a website (HTML is not allowed).
|
|
@ -0,0 +1,2 @@
|
|||
---
|
||||
# defaults file for cloudflared
|
|
@ -0,0 +1 @@
|
|||
CLOUDFLARED_OPTS=--port 5053 --upstream https://1.1.1.1/dns-query --upstream https://1.0.0.1/dns-query
|
|
@ -0,0 +1,15 @@
|
|||
[Unit]
|
||||
Description=cloudflared DNS over HTTPS proxy
|
||||
After=syslog.target network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=cloudflared
|
||||
EnvironmentFile=/etc/default/cloudflared
|
||||
ExecStart=/usr/local/bin/cloudflared proxy-dns $CLOUDFLARED_OPTS
|
||||
Restart=on-failure
|
||||
RestartSec=10
|
||||
KillMode=process
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
|
@ -0,0 +1,2 @@
|
|||
---
|
||||
# handlers file for cloudflared
|
|
@ -0,0 +1,53 @@
|
|||
galaxy_info:
|
||||
author: your name
|
||||
description: your role description
|
||||
company: your company (optional)
|
||||
|
||||
# If the issue tracker for your role is not on github, uncomment the
|
||||
# next line and provide a value
|
||||
# issue_tracker_url: http://example.com/issue/tracker
|
||||
|
||||
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
||||
# - BSD-3-Clause (default)
|
||||
# - MIT
|
||||
# - GPL-2.0-or-later
|
||||
# - GPL-3.0-only
|
||||
# - Apache-2.0
|
||||
# - CC-BY-4.0
|
||||
license: license (GPL-2.0-or-later, MIT, etc)
|
||||
|
||||
min_ansible_version: 2.9
|
||||
|
||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||
# min_ansible_container_version:
|
||||
|
||||
#
|
||||
# Provide a list of supported platforms, and for each platform a list of versions.
|
||||
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
|
||||
# To view available platforms and versions (or releases), visit:
|
||||
# https://galaxy.ansible.com/api/v1/platforms/
|
||||
#
|
||||
# platforms:
|
||||
# - name: Fedora
|
||||
# versions:
|
||||
# - all
|
||||
# - 25
|
||||
# - name: SomePlatform
|
||||
# versions:
|
||||
# - all
|
||||
# - 1.0
|
||||
# - 7
|
||||
# - 99.99
|
||||
|
||||
galaxy_tags: []
|
||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||
# remove the '[]' above, if you add tags to this list.
|
||||
#
|
||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||
# Maximum 20 tags per role.
|
||||
|
||||
dependencies: []
|
||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||
# if you add dependencies to this list.
|
||||
|
|
@ -0,0 +1,33 @@
|
|||
---
|
||||
- name: Download required bin (armv7l)
|
||||
get_url:
|
||||
url: https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-armv6
|
||||
dest: /tmp/
|
||||
register: download
|
||||
when: ansible_architecture == 'armv7l'
|
||||
|
||||
- name: Download required bin (aarch64)
|
||||
get_url:
|
||||
url: https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-arm64
|
||||
dest: /tmp/
|
||||
register: download
|
||||
when: ansible_architecture == 'aarch64'
|
||||
|
||||
- name: Add cloudflared user
|
||||
user:
|
||||
name: cloudflared
|
||||
shell: /usr/sbin/nologin
|
||||
append: yes
|
||||
|
||||
- name: Copy to /usr/local/bin
|
||||
copy:
|
||||
src: "{{ download.dest }}"
|
||||
dest: /usr/local/bin/cloudflared
|
||||
mode: "u=rx,g=rx,o="
|
||||
owner: cloudflared
|
||||
group: cloudflared
|
||||
become: yes
|
||||
|
||||
- name: Configure service
|
||||
import_tasks: service.yml
|
||||
become: yes
|
|
@ -0,0 +1,18 @@
|
|||
---
|
||||
- name: Copy cloudflared config file
|
||||
copy:
|
||||
src: files/cloudflared
|
||||
dest: /etc/default/cloudflared
|
||||
owner: cloudflared
|
||||
group: cloudflared
|
||||
|
||||
- name: Copy service file
|
||||
copy:
|
||||
src: files/cloudflared.service
|
||||
dest: /etc/systemd/system/cloudflared.service
|
||||
|
||||
- name: Start cloudflared
|
||||
systemd:
|
||||
name: cloudflared
|
||||
state: started
|
||||
enabled: yes
|
|
@ -0,0 +1,2 @@
|
|||
---
|
||||
# vars file for cloudflared
|
Loading…
Reference in New Issue