From 0f40ca47c5101a5548c50daaa601699fd4bb572b Mon Sep 17 00:00:00 2001 From: Jayne Passmore Date: Thu, 24 Jul 2025 16:18:39 -0500 Subject: [PATCH] added ansible-update stuff --- files/run_ansible.service | 10 ++++++++++ files/run_ansible.sh | 0 tasks/main.yml | 24 ++++++++++++++++++++++++ templates/run_ansible.timer | 9 +++++++++ 4 files changed, 43 insertions(+) create mode 100644 files/run_ansible.service create mode 100644 files/run_ansible.sh create mode 100644 templates/run_ansible.timer diff --git a/files/run_ansible.service b/files/run_ansible.service new file mode 100644 index 0000000..b102a7c --- /dev/null +++ b/files/run_ansible.service @@ -0,0 +1,10 @@ +[Unit] +Description=Runs ansible playbook + +[Service] +Type=oneshot +RemainAfterExit=no +ExecStart=/scripts/run_ansible.sh + +[Install] +WantedBy=multi-user.target \ No newline at end of file diff --git a/files/run_ansible.sh b/files/run_ansible.sh new file mode 100644 index 0000000..e69de29 diff --git a/tasks/main.yml b/tasks/main.yml index df830a9..bac49f6 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -1,3 +1,27 @@ #SPDX-License-Identifier: MIT-0 --- # tasks file for ansible-update +- name: deploy ansible update script + ansible.builtin.template: + src: templates/ansible-update.sh + dest: /scripts/ansible-update.sh + mode: '0754' + +- name: deploy ansible update service + ansible.builtin.copy: + src: files/ansible-update.service + dest: /usr/lib/systemd/system/ansible-update.service + mode: '0644' + +- name: deploy ansible update timer + ansible.builtin.copy: + src: files/ansible-update.timer + dest: /usr/lib/systemd/system/cansible-update.timer + mode: '0644' + +- name: ensure ansible update script is running + service: + name: ansible-update.timer + state: started + daemon_reload: true + enabled: yes \ No newline at end of file diff --git a/templates/run_ansible.timer b/templates/run_ansible.timer new file mode 100644 index 0000000..acc5260 --- /dev/null +++ b/templates/run_ansible.timer @@ -0,0 +1,9 @@ +[Unit] +Description=Runs run ansible playbook once per day (hour is determined based on ansible id) + +[Timer] +OnCalendar=*-*-* {{ansible_machine_id | int(base=16) % 24}}:00:00 +Unit=certbot-renewal.service + +[Install] +WantedBy=multi-user.target