You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
209 lines
5.8 KiB
209 lines
5.8 KiB
5 years ago
|
---
|
||
|
|
|
||
|
|
- name: Set default install mode to none
|
||
|
|
set_fact: unifi_install_mode="none"
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Install dependencies
|
||
|
|
yum:
|
||
|
|
name:
|
||
|
|
- java-1.8.0-openjdk-headless
|
||
|
|
- mongodb-server
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Create a system account to run unifi
|
||
|
|
user:
|
||
|
|
name: unifi
|
||
|
|
comment: "Unifi system account"
|
||
|
|
system: True
|
||
|
|
shell: /sbin/nologin
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Check if unifi is installed
|
||
|
|
stat: path={{ unifi_root_dir }}/meta/ansible_version
|
||
|
|
register: unifi_version_file
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Check installed version
|
||
|
|
command: cat {{ unifi_root_dir }}/meta/ansible_version
|
||
|
|
register: unifi_current_version
|
||
|
|
changed_when: False
|
||
|
|
when: unifi_version_file.stat.exists
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Set install mode to install
|
||
|
|
set_fact: unifi_install_mode='install'
|
||
|
|
when: not unifi_version_file.stat.exists
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Set install mode to upgrade
|
||
|
|
set_fact: unifi_install_mode='upgrade'
|
||
|
|
when:
|
||
|
|
- unifi_version_file.stat.exists
|
||
|
|
- unifi_current_version is defined
|
||
|
|
- unifi_current_version.stdout != unifi_version
|
||
|
|
- unifi_manage_upgrade == True
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Create archive directory
|
||
|
|
file: path={{ unifi_root_dir }}/archives/{{ unifi_current_version.stdout }} state=directory
|
||
|
|
when: unifi_install_mode == 'upgrade'
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Stop the service
|
||
|
|
service: name=unifi state=stopped
|
||
|
|
when: unifi_install_mode == 'upgrade'
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Archive current version
|
||
|
|
synchronize:
|
||
|
|
src: "{{ unifi_root_dir }}/app"
|
||
|
|
dest: "{{ unifi_root_dir }}/archives/{{ unifi_current_version.stdout }}/"
|
||
|
|
recursive: True
|
||
|
|
delete: True
|
||
|
|
delegate_to: "{{ inventory_hostname }}"
|
||
|
|
when: unifi_install_mode == 'upgrade'
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Create directories
|
||
|
|
file: path={{ unifi_root_dir }}/{{ item.path }} state=directory owner={{ item.owner | default(omit) }} group={{ item.group | default(omit) }} mode={{ item.mode | default(omit) }}
|
||
|
|
with_items:
|
||
|
|
- path: tmp
|
||
|
|
- path: app
|
||
|
|
owner: unifi
|
||
|
|
group: unifi
|
||
|
|
- path: 'app/data'
|
||
|
|
owner: unifi
|
||
|
|
group: unifi
|
||
|
|
mode: 700
|
||
|
|
- path: meta
|
||
|
|
- path: archives
|
||
|
|
- path: backup
|
||
|
|
owner: unifi
|
||
|
|
group: unifi
|
||
|
|
mode: 700
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Download unifi archive
|
||
|
|
get_url:
|
||
|
|
url: "{{ unifi_archive_url }}"
|
||
|
|
dest: "{{ unifi_root_dir }}/tmp"
|
||
|
|
checksum: "sha1:{{ unifi_archive_sha1 }}"
|
||
|
|
when: unifi_install_mode != 'none'
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Extract Unifi
|
||
|
|
unarchive:
|
||
|
|
src: "{{ unifi_root_dir }}/tmp/UniFi.unix.zip"
|
||
|
|
dest: "{{ unifi_root_dir }}/tmp"
|
||
|
|
owner: unifi
|
||
|
|
group: unifi
|
||
|
|
remote_src: True
|
||
|
|
when: unifi_install_mode != 'none'
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Move unifi to its final directory
|
||
|
|
synchronize:
|
||
|
|
src: "{{ unifi_root_dir }}/tmp/UniFi/{{ item }}"
|
||
|
|
dest: "{{ unifi_root_dir }}/app/"
|
||
|
|
delete: True
|
||
|
|
recursive: True
|
||
|
|
with_items:
|
||
|
|
- bin
|
||
|
|
- conf
|
||
|
|
- dl
|
||
|
|
- lib
|
||
|
|
- webapps
|
||
|
|
delegate_to: "{{ inventory_hostname }}"
|
||
|
|
when: unifi_install_mode != 'none'
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Handle unifi HTTP ports
|
||
|
|
iptables_raw:
|
||
|
|
name: unifi_http_ports
|
||
|
|
state: "{{ (unifi_http_src_ip | length > 0) | ternary('present','absent') }}"
|
||
|
|
rules: "-A INPUT -m state --state NEW -p tcp -m multiport --dports {{ unifi_http_ports | join(',') }} -s {{ unifi_http_src_ip | join(',') }} -j ACCEPT"
|
||
|
|
when: iptables_manage | default(True)
|
||
|
|
tags: [firewall,unifi]
|
||
|
|
|
||
|
|
- name: Handle unifi STUN ports
|
||
|
|
iptables_raw:
|
||
|
|
name: unifi_stun_ports
|
||
|
|
state: "{{ (unifi_stun_src_ip | length > 0) | ternary('present','absent') }}"
|
||
|
|
rules: "-A INPUT -m state --state NEW -p udp -m multiport --dports {{ unifi_stun_ports | join(',') }} -s {{ unifi_stun_src_ip | join(',') }} -j ACCEPT"
|
||
|
|
when: iptables_manage | default(True)
|
||
|
|
tags: [firewall,unifi]
|
||
|
|
|
||
|
|
- name: Check if a config file already exists
|
||
|
|
stat: path={{ unifi_root_dir }}/app/data/system.properties
|
||
|
|
register: unifi_config
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Init config file
|
||
|
|
copy: content="is_default=true" dest={{ unifi_root_dir }}/app/data/system.properties owner=unifi group=unifi mode=640
|
||
|
|
when: not unifi_config.stat.exists
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Configure UniFi Controller
|
||
|
|
lineinfile:
|
||
|
|
path: "{{ unifi_root_dir }}/app/data/system.properties"
|
||
|
|
regexp: "^{{ item.option }}.*"
|
||
|
|
line: "{{ item.option }}={{ item.value }}"
|
||
|
|
with_items:
|
||
|
|
- option: unifi.xmx
|
||
|
|
value: 4096
|
||
|
|
- option: unifi.xms
|
||
|
|
value: 4096
|
||
|
|
- option: unifi.G1GC.enabled
|
||
|
|
value: 'true'
|
||
|
|
- option: autobackup.dir
|
||
|
|
value: "{{ unifi_root_dir }}/backup"
|
||
|
|
- option: unifi.http.port
|
||
|
|
value: "{{ unifi_http_port }}"
|
||
|
|
- option: unifi.https.port
|
||
|
|
value: "{{ unifi_https_port }}"
|
||
|
|
- option: portal.http.port
|
||
|
|
value: "{{ unifi_portal_http_port }}"
|
||
|
|
- option: portal.https.port
|
||
|
|
value: "{{ unifi_portal_https_port }}"
|
||
|
|
- option: uuid
|
||
|
|
value: "{{ inventory_hostname | to_uuid }}"
|
||
|
|
notify: restart unifi
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Deploy unit file
|
||
|
|
template: src=unifi.service.j2 dest=/etc/systemd/system/unifi.service
|
||
|
|
notify: restart unifi
|
||
|
|
register: unifi_unit
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Reload systemd
|
||
|
|
command: systemctl daemon-reload
|
||
|
|
when: unifi_unit.changed
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Start and enable the service
|
||
|
|
service: name=unifi state=started enabled=True
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Compress previous version
|
||
|
|
command: tar cJf {{ unifi_root_dir }}/archives/{{ unifi_current_version.stdout }}.txz ./
|
||
|
|
environment:
|
||
|
|
XZ_OPT: -T0
|
||
|
|
args:
|
||
|
|
chdir: "{{ unifi_root_dir }}/archives/{{ unifi_current_version.stdout }}"
|
||
|
|
warn: False
|
||
|
|
when: unifi_install_mode == 'upgrade'
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Remove archive dir
|
||
|
|
file: path={{ unifi_root_dir }}/archives/{{ unifi_current_version.stdout }} state=absent
|
||
|
|
when: unifi_install_mode == 'upgrade'
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- name: Write version installed
|
||
|
|
copy: content={{ unifi_version }} dest={{ unifi_root_dir }}/meta/ansible_version
|
||
|
|
tags: unifi
|
||
|
|
|
||
|
|
- include: filebeat.yml
|