Fix crowdsec deployment on RedHat family version 7
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Some checks reported errors
continuous-integration/drone/push Build encountered an error
This commit is contained in:
parent
2a48449792
commit
826c345aef
2 changed files with 13 additions and 3 deletions
|
|
@ -1,18 +1,28 @@
|
||||||
---
|
---
|
||||||
- name: Install bouncer (currently only firewall)
|
- name: Install Debian family crowdsec bouncer (iptables)
|
||||||
ansible.builtin.apt:
|
ansible.builtin.apt:
|
||||||
name:
|
name:
|
||||||
- crowdsec-firewall-bouncer-iptables
|
- crowdsec-firewall-bouncer-iptables
|
||||||
when:
|
when:
|
||||||
- ansible_os_family == "Debian"
|
- ansible_os_family == "Debian"
|
||||||
|
|
||||||
- name: Install crowdsec
|
- name: Install RedHat family crowdsec bouncer (iptables)
|
||||||
|
ansible.builtin.dnf:
|
||||||
|
name:
|
||||||
|
- crowdsec-firewall-bouncer-iptables
|
||||||
|
state: present
|
||||||
|
when:
|
||||||
|
- ansible_os_family == "RedHat"
|
||||||
|
- ansible_distribution_major_version <= '7'
|
||||||
|
|
||||||
|
- name: Install RedHat family crowdsec bouncer (nftables)
|
||||||
ansible.builtin.dnf:
|
ansible.builtin.dnf:
|
||||||
name:
|
name:
|
||||||
- crowdsec-firewall-bouncer-nftables
|
- crowdsec-firewall-bouncer-nftables
|
||||||
state: present
|
state: present
|
||||||
when:
|
when:
|
||||||
- ansible_os_family == "RedHat"
|
- ansible_os_family == "RedHat"
|
||||||
|
- ansible_distribution_major_version > '7'
|
||||||
|
|
||||||
# - name: Register new bouncer
|
# - name: Register new bouncer
|
||||||
# ansible.builtin.command: cscli bouncers add {{ inventory_hostname }} -o raw
|
# ansible.builtin.command: cscli bouncers add {{ inventory_hostname }} -o raw
|
||||||
|
|
|
||||||
|
|
@ -57,7 +57,7 @@ api:
|
||||||
# key_file: /etc/crowdsec/ssl/key.pem
|
# key_file: /etc/crowdsec/ssl/key.pem
|
||||||
{% endif %}
|
{% endif %}
|
||||||
prometheus:
|
prometheus:
|
||||||
enabled: {{ crowdsec_prometheus.enabled }}
|
enabled: {{ crowdsec_prometheus.enabled | lower }}
|
||||||
level: full
|
level: full
|
||||||
listen_addr: 127.0.0.1
|
listen_addr: 127.0.0.1
|
||||||
listen_port: 6060
|
listen_port: 6060
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue