You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 

65 lines
2.1 KiB

# more or less as per http://wiki.znc.in/Running_ZNC_as_a_system_daemon
- name: Install znc dependencies
apt: pkg={{ item }} state=installed
with_items:
- automake
- build-essential
- checkinstall
- g++
- libperl-dev
- libsasl2-dev
- libssl-dev
- libtool
- openssl
- pkg-config
- python3-dev
- swig
- name: Download znc release
get_url: url=http://znc.in/releases/archive/znc-{{ znc_version }}.tar.gz dest=/root/znc-{{ znc_version }}.tar.gz
- name: Decompress znc source
command: tar xzf /root/znc-{{ znc_version }}.tar.gz chdir=/root creates=/root/znc-{{ znc_version }}/configure
- name: Build and install znc
shell: ./configure --enable-python && make && make install executable=/bin/bash chdir=/root/znc-{{ znc_version }} creates=/usr/local/bin/znc
notify: restart znc
- name: Create znc group
group: name=znc state=present
- name: Create znc user
user: name=znc state=present home=/var/lib/znc system=yes group=znc shell=/usr/sbin/nologin
- name: Copy znc init file into place
copy: src=etc_init.d_znc dest=/etc/init.d/znc mode=0755
- name: Create a combined version of the private key with public cert and intermediate + root CAs
shell: cat /etc/ssl/private/wildcard_private.key /etc/ssl/certs/wildcard_combined.pem >
/var/lib/znc/znc.pem creates=/var/lib/znc/znc.pem
notify: restart znc
- name: Ensure znc user and group can read cert
file: path=/var/lib/znc/znc.pem group=znc owner=znc mode=640
notify: restart znc
- name: Check for existing config file
command: cat /var/lib/znc/configs/znc.conf
register: znc_config
ignore_errors: True
changed_when: False # never report as "changed"
- name: Create znc config directory
file: state=directory path=/var/lib/znc/configs group=znc owner=znc
- name: Copy znc configuration file into place
template: src=var_lib_znc_configs_znc.conf.j2 dest=/var/lib/znc/configs/znc.conf owner=znc group=znc
when: znc_config.rc != 0
notify: restart znc
- name: Set firewall rule for znc
ufw: rule=allow port=6697 proto=tcp
- name: Ensure znc is a system service
service: name=znc state=started enabled=true