forked from ISTI-ansible-roles/ansible-roles
64 lines
1.9 KiB
YAML
64 lines
1.9 KiB
YAML
---
|
|
- name: Get the haproxy repo key
|
|
apt_key: url={{ haproxy_repo_key }} state=present
|
|
when: haproxy_latest_release
|
|
tags: haproxy
|
|
|
|
- name: Define the haproxy repository
|
|
apt_repository: repo='{{ haproxy_ubuntu_latest_repo }}' state=present update_cache=yes
|
|
when:
|
|
- haproxy_latest_release
|
|
- is_ubuntu
|
|
tags: haproxy
|
|
|
|
- name: Define the haproxy repository
|
|
apt_repository: repo='{{ haproxy_debian_latest_repo }}' state=present update_cache=yes
|
|
when:
|
|
- haproxy_latest_release
|
|
- is_debian
|
|
tags: haproxy
|
|
|
|
- name: Install the haproxy package
|
|
apt: name=haproxy state=present default_release={{ ansible_lsb.codename }}-backports update_cache=yes cache_valid_time=3600
|
|
when: not haproxy_latest_release
|
|
register: install_haproxy
|
|
tags: haproxy
|
|
|
|
- name: Install the haproxy package
|
|
apt: name=haproxy state=latest default_release={{ ansible_lsb.codename }}-backports-{{ haproxy_version }} update_cache=yes cache_valid_time=3600
|
|
when:
|
|
- haproxy_latest_release
|
|
- is_debian
|
|
register: install_haproxy
|
|
tags: haproxy
|
|
|
|
- name: Install the haproxy package
|
|
apt: name=haproxy state=latest update_cache=yes cache_valid_time=3600
|
|
when:
|
|
- haproxy_latest_release
|
|
- is_ubuntu
|
|
register: install_haproxy
|
|
tags: haproxy
|
|
|
|
- name: Enable kernel binding non local IP addresses
|
|
sysctl: name={{ item }} value=1 reload=yes state=present
|
|
with_items:
|
|
- net.ipv4.ip_nonlocal_bind
|
|
when: haproxy_k_bind_non_local_ip
|
|
tags: [ 'haproxy', 'haproxy_sysctl' ]
|
|
|
|
- name: Disable kernel binding non local IP addresses
|
|
sysctl: name={{ item }} value=0 reload=yes state=present
|
|
with_items:
|
|
- net.ipv4.ip_nonlocal_bind
|
|
when: not haproxy_k_bind_non_local_ip
|
|
tags: [ 'haproxy', 'haproxy_sysctl' ]
|
|
|
|
- name: Increase the connection tracking table capacity
|
|
sysctl: name={{ item }} value={{ haproxy_sysctl_conntrack_max }} reload=yes state=present
|
|
with_items:
|
|
- net.nf_conntrack_max
|
|
when: is_not_debian9
|
|
tags: [ 'haproxy', 'haproxy_sysctl' ]
|
|
|