From 217cf13903aacb3ed8dee6b28b59be7ecb837f3b Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Sat, 22 Aug 2020 18:40:16 +0200
Subject: add fileserver role

---
 roles/chaos-at-home/fileserver/tasks/main.yml | 64 +++++++++++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 roles/chaos-at-home/fileserver/tasks/main.yml

(limited to 'roles/chaos-at-home/fileserver/tasks/main.yml')

diff --git a/roles/chaos-at-home/fileserver/tasks/main.yml b/roles/chaos-at-home/fileserver/tasks/main.yml
new file mode 100644
index 00000000..9cc20853
--- /dev/null
+++ b/roles/chaos-at-home/fileserver/tasks/main.yml
@@ -0,0 +1,64 @@
+---
+- name: create zfs filesystems
+  loop: "{{ fileserver_zfs_filesystems | dict2items }}"
+  loop_control:
+    label: "{{ item.value.pool | default(fileserver_zfs_default_pool) }}/{{ item.key }}"
+  zfs:
+    name: "{{ item.value.pool | default(fileserver_zfs_default_pool) }}/{{ item.key }}"
+    state: present
+    extra_zfs_properties: "{{ fileserver_zfs_common_properties | combine(item.value.properties | default({})) }}"
+
+- name: install nfs-server
+  apt:
+    name: nfs-kernel-server
+    state: present
+
+  # rpc.statd is only needed for NFSv2 and NFSv3
+- name: disable rpc.statd
+  lineinfile:
+    path: /etc/default/nfs-common
+    regexp: '^NEED_STATD='
+    line: 'NEED_STATD=no'
+  notify: restart nfs-server
+
+- name: disable NFSv2 and NFSv3
+  lineinfile:
+    path: /etc/default/nfs-kernel-server
+    regexp: '^RPCMOUNTDOPTS="(.*?) ?(--no-nfs-version 2 --no-nfs-version 3)?"'
+    backrefs: yes
+    line: 'RPCMOUNTDOPTS="\1 --no-nfs-version 2 --no-nfs-version 3"'
+  notify: restart nfs-server
+
+- name: create export root directory
+  file:
+    path: "{{ fileserver_nfs_root }}"
+    state: directory
+
+- name: create bind mounts for all filesystems to be exported
+  loop: "{{ fileserver_zfs_filesystems | dict2items }}"
+  loop_control:
+    label: "{{ item.value.export_as | default(item.key) }}"
+  when: (item.value.export is not defined) or (item.value.export | bool)
+  mount:
+    src: "{{ zfs_zpools[(item.value.pool | default(fileserver_zfs_default_pool))].mountpoint }}/{{ item.key }}"
+    path: "{{ fileserver_nfs_root }}/{{ item.value.export_as | default(item.key) }}"
+    fstype: none
+    opts: defaults,bind,x-systemd.automount,nofail
+    state: mounted
+  notify: restart nfs-server
+
+- name: generate list of all export destinations
+  set_fact:
+    filesearver_nfs_all_destinations: "{{ fileserver_nfs_default_destinations | map(attribute='dest') | list | union(fileserver_zfs_filesystems | dict2items | selectattr('value.export_to', 'defined') | map(attribute='value.export_to') | flatten | map(attribute='dest') | list) | cidr_merge }}"
+
+- name: export filesystems
+  blockinfile:
+    path: /etc/exports
+    block: |
+      {{ fileserver_nfs_root }}  {% for dest in filesearver_nfs_all_destinations %} {{ dest }}(ro,fsid=0,sync){% endfor %}{{ '' }}
+      {% for fs in (fileserver_zfs_filesystems | dict2items) %}
+      {%   if (fs.value.export is not defined) or (fs.value.export | bool) %}
+      {{ fileserver_nfs_root }}/{{ fs.value.export_as | default(fs.key) }}  {% for d in fs.value.export_to | default(fileserver_nfs_default_destinations) %} {{ d.dest }}({{ d.opts | default(fileserver_nfs_default_options) | join(',') }}){% endfor %}{{ '' }}
+      {%   endif %}
+      {% endfor %}
+  notify: restart nfs-server
-- 
cgit v1.2.3