| --- |
| - hosts: {{ instance_name }} |
| gather_facts: False |
| connection: ssh |
| user: {{ username }} |
| sudo: yes |
| vars: |
| container_name: {{ container_name }} |
| cdn_enable: {{ cdn_enable }} |
| dnsdemux_ip: {{ dnsdemux_ip }} |
| firewall_enable: {{ firewall_enable }} |
| url_filter_enable: {{ url_filter_enable }} |
| vlan_ids: |
| {% for vlan_id in vlan_ids %} |
| - {{ vlan_id }} |
| {% endfor %} |
| c_tags: |
| {% for c_tag in c_tags %} |
| - {{ c_tag }} |
| {% endfor %} |
| s_tags: |
| {% for s_tag in s_tags %} |
| - {{ s_tag }} |
| {% endfor %} |
| firewall_rules: |
| {% for firewall_rule in firewall_rules.split("\n") %} |
| - {{ firewall_rule }} |
| {% endfor %} |
| cdn_prefixes: |
| {% for prefix in cdn_prefixes %} |
| - {{ prefix }} |
| {% endfor %} |
| bbs_addrs: |
| {% for bbs_addr in bbs_addrs %} |
| - {{ bbs_addr }} |
| {% endfor %} |
| nat_ip: {{ nat_ip }} |
| nat_mac: {{ nat_mac }} |
| lan_ip: {{ lan_ip }} |
| lan_mac: {{ lan_mac }} |
| wan_ip: {{ wan_ip }} |
| wan_mac: {{ wan_mac }} |
| wan_container_mac: {{ wan_container_mac }} |
| wan_next_hop: 10.0.1.253 # FIX ME |
| private_ip: {{ private_ip }} |
| private_mac: {{ private_mac }} |
| hpc_client_ip: {{ hpc_client_ip }} |
| hpc_client_mac: {{ hpc_client_mac }} |
| keystone_tenant_id: {{ keystone_tenant_id }} |
| keystone_user_id: {{ keystone_user_id }} |
| rabbit_user: {{ rabbit_user }} |
| rabbit_password: {{ rabbit_password }} |
| rabbit_host: {{ rabbit_host }} |
| safe_browsing: |
| {% for mac in safe_browsing_macs %} |
| - {{ mac }} |
| {% endfor %} |
| |
| tasks: |
| - name: vCPE basic dnsmasq config |
| copy: src=/opt/xos/observers/vcpe/files/vcpe.dnsmasq dest=/var/container_volumes/{{ container_name }}/etc/dnsmasq.d/vcpe.conf owner=root group=root |
| notify: |
| - restart dnsmasq |
| |
| - name: dnsmasq config |
| template: src=/opt/xos/observers/vcpe/templates/dnsmasq_servers.j2 dest=/var/container_volumes/{{ container_name }}/etc/dnsmasq.d/servers.conf owner=root group=root |
| notify: |
| - restart dnsmasq |
| |
| handlers: |
| # Dnsmasq is automatically restarted in the container |
| - name: restart dnsmasq |
| shell: docker exec {{ container_name }} /usr/bin/killall dnsmasq |
| |