Ansible 批量部署

anseble role

[root@ubuntu24 ansible]$ tree
.
├── ansible.cfg
├── dns_master.yaml
├── dns_slave.yaml
├── hosts
├── LVS.yaml
├── mysql-discuz.yaml
├── mysql-jpress.yaml
├── nginx_php.yaml
├── roles
│   ├── LVS
│   │   ├── files
│   │   ├── tasks
│   │   │   ├── configure.yaml
│   │   │   ├── install.yaml
│   │   │   └── main.yaml
│   │   └── templates
│   ├── master_dns
│   │   ├── files
│   │   ├── tasks
│   │   │   ├── configure.yaml
│   │   │   ├── install.yaml
│   │   │   ├── main.yaml
│   │   │   └── restart.yaml
│   │   └── templates
│   │       └── db.linux-magedu.com.j2
│   ├── mysql-discuz
│   │   ├── files
│   │   │   └── discuzer.sql
│   │   ├── tasks
│   │   │   ├── configure.yaml
│   │   │   ├── install.yaml
│   │   │   ├── main.yaml
│   │   │   └── user.yaml
│   │   └── templates
│   ├── mysql-jpress
│   │   ├── files
│   │   │   └── jpresser.sql
│   │   ├── tasks
│   │   │   ├── configure.yaml
│   │   │   ├── install.yaml
│   │   │   ├── main.yaml
│   │   │   └── user.yaml
│   │   └── templates
│   ├── nginx
│   │   ├── files
│   │   ├── tasks
│   │   │   ├── configure.yaml
│   │   │   ├── install.yaml
│   │   │   ├── main.yaml
│   │   │   └── user.yaml
│   │   └── templates
│   │       └── www.linux-magedu.com.j2
│   ├── php
│   │   ├── files
│   │   │   └── Discuz_X3.5_SC_UTF8_20240520.zip
│   │   ├── tasks
│   │   │   ├── configure.yaml
│   │   │   ├── install.yaml
│   │   │   ├── main.yaml
│   │   │   └── user.yaml
│   │   └── templates
│   ├── slave_dns
│   │   ├── files
│   │   ├── tasks
│   │   │   ├── configure.yaml
│   │   │   ├── install.yaml
│   │   │   ├── main.yaml
│   │   │   └── restart.yaml
│   │   └── templates
│   │       └── db.linux-magedu.com.j2
│   └── tomcat
│       ├── files
│       │   ├── apache-tomcat-9.0.89.tar.gz
│       │   └── jpress-v5.1.0.war
│       ├── tasks
│       │   ├── configure.yaml
│       │   ├── install.yaml
│       │   ├── main.yaml
│       │   └── user.yaml
│       └── templates
│           └── tomcat.service.j2
└── test.yaml34 directories, 49 files

LVS

install.yaml

- name: install ipvsadmapt: name=ipvsadm state=present

configure.yaml

- name: ipv4.ip_forwardshell: echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.conf- name: Reload sysctl.confshell: sysctl -p- name: Create a clustershell: ipvsadm -A -t 10.0.0.6:80 ; ipvsadm -A -t 10.0.0.16:80- name: Add servershell: ipvsadm -a -t 10.0.0.6:80 -r 192.168.10.7:80 ; ipvsadm -a -t 10.0.0.16:80 -r 192.168.10.8:88

master_dns

install.yaml

- name: bind9apt: name=bind9 state=present

configure.yaml

- name: configure on named.conf.default-zoneslineinfile:path: /etc/bind/named.conf.default-zonesline: |zone "linux-magedu.com" IN {type master;file "/etc/bind/db.linux-magedu.com";};- name: configure on db.linux-magedu.comtemplate: src=db.linux-magedu.com.j2 dest=/etc/bind/db.linux-magedu.com

restart.yaml

- name: restart serviceservice: name=named state=restarted

db.linux-magedu.com.j2

linux-magedu.com.       86400   IN      SOA     linux-magedu-dns. admin.linux-magedu.com. (143 3H 15M 1D 1W)
linux-magedu.com.       86400   IN      NS      dns1.linux-magedu.com.
linux-magedu.com.       86400   IN      NS      dns2.linux-magedu.com.dns1.linux-magedu.com.  86400   IN      A       10.0.0.3
dns2.linux-magedu.com.  86400   IN      A       10.0.0.13www.linux-magedu.com.   86400   IN      A       {{ targetIP }}

slave_dns

install.yaml

- name: bind9apt: name=bind9 state=present

configure.yaml

- name: configure on named.conf.default-zoneslineinfile:path: /etc/bind/named.conf.default-zonesline: >zone "linux-magedu.com" IN {type slave;masters {10.0.0.3;};file "/etc/bind/slaves/db.linux-magedu.com";};- name: change apparmorlineinfile:path: /etc/apparmor.d/usr.sbin.namedinsertafter: "  /var/cache/bind/ rw,$"line: >/etc/bind/slaves/** rwk,/etc/bind/slaves/ rwk,- name: restart apparmorservice: name=apparmor state=restarted- name: Create filefile: path=/etc/bind/slaves state=directory mode=777- name: configure on db.linux-magedu.comtemplate: src=db.linux-magedu.com.j2 dest=/etc/bind/slaves/db.linux-magedu.com

restart.yaml

- name: restart serviceservice: name=named state=restarted

db.linux-magedu.com.j2

linux-magedu.com.       86400   IN      SOA     linux-magedu-dns. admin.linux-magedu.com. (143 3H 15M 1D 1W)
linux-magedu.com.       86400   IN      NS      dns1.linux-magedu.com.
linux-magedu.com.       86400   IN      NS      dns2.linux-magedu.com.dns1.linux-magedu.com.  86400   IN      A       10.0.0.3
dns2.linux-magedu.com.  86400   IN      A       10.0.0.13www.linux-magedu.com.   86400   IN      A       {{ targetIP }}

nginx

user.yaml

- name: add-nginx-groupgroup: name=nginx gid=800 system=yes- name: add-nginx-useruser: name=nginx group=800 system=yes uid=800 create_home=no

install.yaml

- name: install nginxapt: name=nginx state=present

configure.yaml

- name: add-configuretemplate: src=www.linux-magedu.com.j2 dest=/etc/nginx/sites-enabled/www.linux-magedu.com- name: Restart-serviceservice: name=nginx state=restarted

www.linux-magedu.com.j2

server{listen 80;server_name www.linux-magedu.com;root /var/www/html/www.linux-magedu.com;index index.html index.php;location ~ \.php$ {fastcgi_pass 127.0.0.1:9000;fastcgi_index index.php;include fastcgi.conf;}
}

php

user.yaml

- name: add-php-useruser:name: www-datagroup: 33system: yesuid: 33create_home: yeshome: /var/wwwshell: /usr/sbin/nologin

install.yaml

- name: install-phpapt: name=php-fpm,php-mysqlnd,php-json,php-gd,php-xml,php-mbstring,php-zip state=present

configure.yaml

- name: Change-Configuration1shell: sed -i 's/listen = \/run\/php\/php8.3-fpm.sock/;listen = \/run\/php\/php8.3-fpm.sock/g' /etc/php/8.3/fpm/pool.d/www.conf- name: Change-Configuration2shell: sed -i '42i\ listen = 127.0.0.1:9000' /etc/php/8.3/fpm/pool.d/www.conf- name: Restart-serviceservice: name=php8.3-fpm state=restarted- name: create-directory1file: path=/var/www/html/www.linux-magedu.com state=directory owner=www-data group=www-data- name: copy-Discuzcopy: src=files/Discuz_X3.5_SC_UTF8_20240520.zip dest=/root/- name: create-directory2file: path=/root/discuz state=directory owner=www-data group=www-data- name: install unzipapt: name=unzip state=present- name: decompressing-filesunarchive: src=/root/Discuz_X3.5_SC_UTF8_20240520.zip dest=/root/discuz- name: copy-fileshell: cp -r /root/discuz/upload/* /var/www/html/www.linux-magedu.com- name: Switch-user-groupshell: chown -R www-data:www-data /var/www/html/www.linux-magedu.com

tomcat

user.yaml

- name: add-group-tomcatgroup: name=tomcat system=yes- name: add-user-tomcatuser: name=tomcat group=999 system=yes shell=/usr/sbin/nologin

install.yaml

- name: install-javaapt: name=openjdk-11-jdk state=present- name: copy-tomcat.zipcopy: src=files/apache-tomcat-9.0.89.tar.gz dest=/root/apache-tomcat-9.0.89.tar.gz- name: unarchive-tomcat.zipshell: tar xf /root/apache-tomcat-9.0.89.tar.gz -C /usr/local/- name: create-linkfile: src=/usr/local/apache-tomcat-9.0.89 path=/usr/local/tomcat state=lin- name: environment-variableshell: ln -s /usr/local/tomcat/bin/* /usr/local/bin/- name: alter-filefile: path=/usr/local/tomcat/ state=directory recurse=yes owner=tomcat group=tomcat- name: service-scripttemplate: src=tomcat.service.j2 dest=/lib/systemd/system/tomcat.service- name: restart-serviceservice: name=tomcat.service state=started

configure.yaml

- name: create-directoryfile: path=/data/ state=directory owner=tomcat group=tomcat recurse=yes- name: copy-jpress.warcopy: src=files/jpress-v5.1.0.war dest=/data/jpress.war- name: change-configurelineinfile:path: /usr/local/tomcat/conf/server.xmlinsertafter: ".*</Host>.*"line: |<Host name="jpress.linux-magedu.com"  appBase="/data/" unpackWARs="true" autoDeploy="true"></Host>- name: restart-tomcat-serviceservice: name=tomcat.service state=restarted- name: chang-iptableshell: iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080

tomcat.service.j2

[Unit]
Description=Tomcat
After=syslog.target network.target[Service]
Type=forking
Environment=JAVA_HOME=/usr/lib/jvm/java-11-openjdk-amd64/
ExecStart=/usr/local/tomcat/bin/startup.sh
ExecStop=/usr/local/tomcat/bin/shutdown.sh
PrivateTmp=true
User=tomcat
Group=tomcat[Install]
WantedBy=multi-user.target

mysql-discuz

user.yaml

- name: add-mysql-groupgroup: name=mysql gid=306 system=yes- name: add-mysql-useruser: name=mysql group=306 system=yes uid=306 create_home=no

install.yaml

- name: install-mysqlapt: name=mysql-server state=present update_cache=yes- name: Change-Configuration-mysql-1lineinfile: path=/etc/mysql/mysql.conf.d/mysqld.cnf backrefs=yes regexp='^(bind-address.*)$' line='#\1'- name: Change-Configuration-mysql-2lineinfile:path: /etc/mysql/mysql.conf.d/mysqld.cnfline: |skip-name-resolvedefault-authentication-plugin=mysql_native_password

configure.yaml

- name: restart-serviceservice: name=mysql.service state=restarted- name: copy-mysql-filecopy: src=files/discuzer.sql dest=/root/discuzer.sql- name: mysql-client-initshell: mysql < /root/discuzer.sql- name: create-directory-backupfile: path=/backup/ state=directory- name: Generate database backupcron:name: Database Backup Cronminute: 0hour: 5job: "backup_date=$(date +%Y%m%d%H%m%S) && mysqldump discuz > /backup/backup_${backup_date}.sql"

discuzer.sql

create database if not exists discuz;
create user 'discuzer'@'10.0.0.%' identified by '123456';
grant all on discuz.* to 'discuzer'@'10.0.0.%';
flush privileges;

mysql-jpress

user.yaml

- name: add-mysql-groupgroup: name=mysql gid=306 system=yes- name: add-mysql-useruser: name=mysql group=306 system=yes uid=306 create_home=no

install.yaml

- name: install-mysqlapt: name=mysql-server state=present update_cache=yes- name: Change-Configuration-mysql-1lineinfile: path=/etc/mysql/mysql.conf.d/mysqld.cnf backrefs=yes regexp='^(bind-address.*)$' line='#\1'- name: Change-Configuration-mysql-2lineinfile:path: /etc/mysql/mysql.conf.d/mysqld.cnfline: |skip-name-resolvedefault-authentication-plugin=mysql_native_password

configure.yaml

- name: restart-serviceservice: name=mysql.service state=restarted- name: copy-mysql-filecopy: src=files/jpresser.sql dest=/root/jpresser.sql- name: mysql-client-initshell: mysql < /root/jpresser.sql- name: create-directory-backupfile: path=/backup/ state=directory- name: Generate database backupcron:name: Database Backup Cronminute: 0hour: 5job: "backup_date=$(date +%Y%m%d%H%m%S) && mysqldump jpress > /backup/backup_${backup_date}.sql"

jpresser.sql

create database if not exists jpress;
create user 'jpresser'@'10.0.0.%' identified by '123456';
grant all on jpress.* to 'jpresser'@'10.0.0.%';
flush privileges;