|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
- name: Set initial facts
|
|
|
|
|
block:
|
|
|
|
|
- set_fact: crowdsec_install_mode='none'
|
|
|
|
|
- set_fact: crowdsec_current_version=''
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
- name: Check if crowdsec is installed
|
|
|
|
|
stat: path=/usr/local/bin/crowdsec
|
|
|
|
|
register: crowdsec_bin
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
- name: Check installed version
|
|
|
|
|
shell: |
|
|
|
|
|
crowdsec -version 2>&1 | perl -ne 'm/version: v(\d+(\.\d+)*)/ && print $1'
|
|
|
|
|
register: crowdsec_current_version
|
|
|
|
|
changed_when: False
|
|
|
|
|
when: crowdsec_bin.stat.exists
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
- name: Set install mode
|
|
|
|
|
set_fact: crowdsec_install_mode='install'
|
|
|
|
|
when: not crowdsec_bin.stat.exists
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
- name: Set upgrade mode
|
|
|
|
|
set_fact: crowdsec_install_mode='upgrade'
|
|
|
|
|
when:
|
|
|
|
|
- crowdsec_bin.stat.exists
|
|
|
|
|
- crowdsec_current_version.stdout != crowdsec_version
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
# Create a random db password if needed
|
|
|
|
|
- block:
|
|
|
|
|
- import_tasks: ../includes/get_rand_pass.yml
|
|
|
|
|
vars:
|
|
|
|
|
- pass_file: "/etc/crowdsec/meta/ansible_db_pass"
|
|
|
|
|
- complex: False
|
|
|
|
|
- set_fact: crowdsec_db_pass={{ rand_pass }}
|
|
|
|
|
when:
|
|
|
|
|
- crowdsec_db_pass is not defined
|
|
|
|
|
- crowdsec_lapi_enabled
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
# Check if local API credentials are available in the meta dir
|
|
|
|
|
- name: Check local API credential files
|
|
|
|
|
stat: path=/etc/crowdsec/meta/lapi_pass
|
|
|
|
|
register: crowdsec_lapi_pass_file
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
- name: Read the local API pass
|
|
|
|
|
block:
|
|
|
|
|
- slurp: src=/etc/crowdsec/meta/lapi_pass
|
|
|
|
|
register: crowdsec_lapi_pass_meta
|
|
|
|
|
- set_fact: crowdsec_lapi_pass={{ crowdsec_lapi_pass_meta.content | b64decode | trim }}
|
|
|
|
|
when: crowdsec_lapi_pass is not defined and crowdsec_lapi_pass_file.stat.exists
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
# Check if central API credentials are available in the meta dir
|
|
|
|
|
- name: Check central API credential files
|
|
|
|
|
block:
|
|
|
|
|
- stat: path=/etc/crowdsec/meta/capi_user
|
|
|
|
|
register: crowdsec_capi_user_file
|
|
|
|
|
- stat: path=/etc/crowdsec/meta/capi_pass
|
|
|
|
|
register: crowdsec_capi_pass_file
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
- name: Read the central API user
|
|
|
|
|
block:
|
|
|
|
|
- slurp: src=/etc/crowdsec/meta/capi_user
|
|
|
|
|
register: crowdsec_capi_user_meta
|
|
|
|
|
- set_fact: crowdsec_capi_user={{ crowdsec_capi_user_meta.content | b64decode | trim }}
|
|
|
|
|
when: crowdsec_capi_user is not defined and crowdsec_capi_user_file.stat.exists
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
|
|
|
|
- name: Read the central API pass
|
|
|
|
|
block:
|
|
|
|
|
- slurp: src=/etc/crowdsec/meta/capi_pass
|
|
|
|
|
register: crowdsec_capi_pass_meta
|
|
|
|
|
- set_fact: crowdsec_capi_pass={{ crowdsec_capi_pass_meta.content | b64decode | trim }}
|
|
|
|
|
when: crowdsec_capi_pass is not defined and crowdsec_capi_pass_file.stat.exists
|
|
|
|
|
tags: crowdsec
|
|
|
|
|
|
