feat(repo): IaaS baseline

ansible/roles/fw/tasks/services/set_bind.yaml

@@ -25,7 +25,7 @@
   become: true
   when: is_bind_installed.rc != 0
 
-- name: Deploy acem.key
+- name: Deploy acme.key
   ansible.builtin.copy:
     content: "{{ hostvars['console']['bind']['acme_key'] }}"
     dest: "/etc/bind/acme.key"

ansible/roles/fw/tasks/services/set_ddns.yaml

@@ -6,7 +6,7 @@
       API_KEY={{ hostvars['console']['ddns']['api_key'] }}
     dest: "/etc/secrets/{{ node['uid'] }}/ddns.env"
     owner: "{{ ansible_user }}"
-    group: "svadmins"
+    group: "{{ node['group'] }}"
     mode: "0400"
   become: true
   no_log: true
@@ -16,7 +16,7 @@
     src: "{{ hostvars['console']['node']['config_path'] }}/services/systemd/fw/ddns/ddns.sh"
     dest: "/usr/local/bin"
     owner: "{{ ansible_user }}"
-    group: "svadmins"
+    group: "{{ node['group'] }}"
     mode: "0711"
   become: true
 
@@ -25,7 +25,7 @@
     src: "{{ hostvars['console']['node']['config_path'] }}/services/systemd/fw/ddns/{{ item }}.j2"
     dest: "{{ node['home_path'] }}/.config/systemd/user/{{ item }}"
     owner: "{{ ansible_user }}"
-    group: "svadmins"
+    group: "{{ node['group'] }}"
     mode: "0600"
     validate: "/usr/bin/systemd-analyze verify %s"
   loop:

ansible/roles/fw/tasks/services/set_kea.yaml

@@ -26,7 +26,7 @@
   become: true
   notify: "notification_restart_kea4"
 
-- name: Create kea-dhcp-server.service.d
+- name: Create kea-dhcp4-server.service.d
   ansible.builtin.file:
     path: "/etc/systemd/system/kea-dhcp4-server.service.d"
     state: "directory"
@@ -35,7 +35,7 @@
     mode: "0755"
   become: true
 
-- name: Set kea-dhcp-server.service.d/override.conf
+- name: Set kea-dhcp4-server.service.d/override.conf
   ansible.builtin.copy:
     dest: "/etc/systemd/system/kea-dhcp4-server.service.d/override.conf"
     content: |