summaryrefslogtreecommitdiff
path: root/roles/chaos-at-home/fileserver/tasks
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2020-08-22 18:40:16 +0200
committerChristian Pointner <equinox@spreadspace.org>2020-08-22 18:40:16 +0200
commit217cf13903aacb3ed8dee6b28b59be7ecb837f3b (patch)
tree2c3eefa59277e1519076dae8fd5c4c069ef3272e /roles/chaos-at-home/fileserver/tasks
parentadd role wireguard p2p (diff)
add fileserver role
Diffstat (limited to 'roles/chaos-at-home/fileserver/tasks')
-rw-r--r--roles/chaos-at-home/fileserver/tasks/main.yml64
1 files changed, 64 insertions, 0 deletions
diff --git a/roles/chaos-at-home/fileserver/tasks/main.yml b/roles/chaos-at-home/fileserver/tasks/main.yml
new file mode 100644
index 00000000..9cc20853
--- /dev/null
+++ b/roles/chaos-at-home/fileserver/tasks/main.yml
@@ -0,0 +1,64 @@
+---
+- name: create zfs filesystems
+ loop: "{{ fileserver_zfs_filesystems | dict2items }}"
+ loop_control:
+ label: "{{ item.value.pool | default(fileserver_zfs_default_pool) }}/{{ item.key }}"
+ zfs:
+ name: "{{ item.value.pool | default(fileserver_zfs_default_pool) }}/{{ item.key }}"
+ state: present
+ extra_zfs_properties: "{{ fileserver_zfs_common_properties | combine(item.value.properties | default({})) }}"
+
+- name: install nfs-server
+ apt:
+ name: nfs-kernel-server
+ state: present
+
+ # rpc.statd is only needed for NFSv2 and NFSv3
+- name: disable rpc.statd
+ lineinfile:
+ path: /etc/default/nfs-common
+ regexp: '^NEED_STATD='
+ line: 'NEED_STATD=no'
+ notify: restart nfs-server
+
+- name: disable NFSv2 and NFSv3
+ lineinfile:
+ path: /etc/default/nfs-kernel-server
+ regexp: '^RPCMOUNTDOPTS="(.*?) ?(--no-nfs-version 2 --no-nfs-version 3)?"'
+ backrefs: yes
+ line: 'RPCMOUNTDOPTS="\1 --no-nfs-version 2 --no-nfs-version 3"'
+ notify: restart nfs-server
+
+- name: create export root directory
+ file:
+ path: "{{ fileserver_nfs_root }}"
+ state: directory
+
+- name: create bind mounts for all filesystems to be exported
+ loop: "{{ fileserver_zfs_filesystems | dict2items }}"
+ loop_control:
+ label: "{{ item.value.export_as | default(item.key) }}"
+ when: (item.value.export is not defined) or (item.value.export | bool)
+ mount:
+ src: "{{ zfs_zpools[(item.value.pool | default(fileserver_zfs_default_pool))].mountpoint }}/{{ item.key }}"
+ path: "{{ fileserver_nfs_root }}/{{ item.value.export_as | default(item.key) }}"
+ fstype: none
+ opts: defaults,bind,x-systemd.automount,nofail
+ state: mounted
+ notify: restart nfs-server
+
+- name: generate list of all export destinations
+ set_fact:
+ filesearver_nfs_all_destinations: "{{ fileserver_nfs_default_destinations | map(attribute='dest') | list | union(fileserver_zfs_filesystems | dict2items | selectattr('value.export_to', 'defined') | map(attribute='value.export_to') | flatten | map(attribute='dest') | list) | cidr_merge }}"
+
+- name: export filesystems
+ blockinfile:
+ path: /etc/exports
+ block: |
+ {{ fileserver_nfs_root }} {% for dest in filesearver_nfs_all_destinations %} {{ dest }}(ro,fsid=0,sync){% endfor %}{{ '' }}
+ {% for fs in (fileserver_zfs_filesystems | dict2items) %}
+ {% if (fs.value.export is not defined) or (fs.value.export | bool) %}
+ {{ fileserver_nfs_root }}/{{ fs.value.export_as | default(fs.key) }} {% for d in fs.value.export_to | default(fileserver_nfs_default_destinations) %} {{ d.dest }}({{ d.opts | default(fileserver_nfs_default_options) | join(',') }}){% endfor %}{{ '' }}
+ {% endif %}
+ {% endfor %}
+ notify: restart nfs-server