322 lines
8.3 KiB
YAML
322 lines
8.3 KiB
YAML
---
|
|
##### Install zabbix-agent
|
|
- name: ping hosts
|
|
ping:
|
|
|
|
- name: check OS
|
|
debug: msg={{ansible_distribution}}-{{ansible_distribution_version}}
|
|
tags: configure_zabbix
|
|
|
|
### centOS 7
|
|
- name: disable SELinux
|
|
selinux:
|
|
state: disabled
|
|
when: ansible_os_family == "RedHat"
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix centOS 7 rpm file
|
|
yum:
|
|
name: "{{ centos7_link }}"
|
|
when: ansible_os_family == "RedHat"
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix-agent 4.4 for centOS 7
|
|
yum:
|
|
name: zabbix-agent
|
|
enablerepo: zabbix
|
|
update_cache: true
|
|
state: latest
|
|
when: ansible_os_family == "RedHat"
|
|
tags: configure_zabbix
|
|
|
|
### Debian 8
|
|
- name: download zabbix deb file for Debian 8
|
|
get_url:
|
|
url: "{{ debian8_link }}"
|
|
dest: "/tmp/{{ debian8_file }}"
|
|
when: ansible_distribution_release == 'jessie'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix deb in Debian 8
|
|
apt: deb "/tmp/{{ debian8_file }}"
|
|
when: ansible_distribution_release == 'jessie'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix-agent 4.4 Debian 8
|
|
apt:
|
|
name: zabbix-agent
|
|
state: latest
|
|
update_cache: yes
|
|
when: ansible_distribution_release == 'jessie'
|
|
tags: configure_zabbix
|
|
|
|
### Debian 9
|
|
- name: download zabbix deb file for Debian 9
|
|
get_url:
|
|
url: "{{ debian9_link }}"
|
|
dest: "/tmp/{{ debian9_file }}"
|
|
when: ansible_distribution_release == 'stretch'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix deb in Debian 9
|
|
apt: deb "/tmp/{{ debian9_file }}"
|
|
when: ansible_distribution_release == 'stretch'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix-agent 4.4 Debian 9
|
|
apt:
|
|
name: zabbix-agent
|
|
state: latest
|
|
update_cache: yes
|
|
when: ansible_distribution_release == 'stretch'
|
|
tags: configure_zabbix
|
|
|
|
### Debian 10
|
|
- name: download zabbix deb file for Debian 10
|
|
get_url:
|
|
url: "{{ debian10_link }}"
|
|
dest: "/tmp/{{ debian10_file }}"
|
|
when: ansible_distribution_release == 'buster'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix deb in Debian 10
|
|
apt: deb "/tmp/{{ debian10_file }}"
|
|
when: ansible_distribution_release == 'buster'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix-agent 4.4 Debian 10
|
|
apt:
|
|
name: zabbix-agent
|
|
state: latest
|
|
update_cache: yes
|
|
when: ansible_distribution_release == 'buster'
|
|
tags: configure_zabbix
|
|
|
|
### Ubuntu 16.04 Xenial
|
|
- name: download zabbix deb file fot Ubuntu 16.04
|
|
get_url:
|
|
url: "{{ ubuntu16_link }}"
|
|
dest: "/tmp/{{ ubuntu16_file }}"
|
|
when: ansible_distribution_release == 'xenial'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix deb for Ubuntu 16.04 Xenial
|
|
apt: deb "/tmp/{{ ubuntu16_file }}"
|
|
when: ansible_distribution_release == 'xenial'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix-agent 4.4 Ubuntu 16.04
|
|
apt:
|
|
name: zabbix-agent
|
|
state: latest
|
|
update_cache: yes
|
|
when: ansible_distribution_release == 'xenial'
|
|
tags: configure_zabbix
|
|
|
|
|
|
### Ubuntu 18.04 Bionic Beaver
|
|
- name: download zabbix deb file fot Ubuntu 18.04
|
|
get_url:
|
|
url: "{{ ubuntu18_link }}"
|
|
dest: "/tmp/{{ ubuntu18_file }}"
|
|
when: ansible_distribution_release == 'bionic'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix deb for Ubuntu 18.04 Xenial
|
|
apt: deb "/tmp/{{ ubuntu18_file }}"
|
|
when: ansible_distribution_release == 'bionic'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix-agent 4.4 Ubuntu 18.04
|
|
apt:
|
|
name: zabbix-agent
|
|
state: latest
|
|
update_cache: yes
|
|
when: ansible_distribution_release == 'bionic'
|
|
tags: configure_zabbix
|
|
### Ubunto 20.04 Focal
|
|
- name: download zabbix deb file fot Ubuntu 20.04
|
|
get_url:
|
|
url: "{{ ubuntu20_link }}"
|
|
dest: "/tmp/{{ ubuntu20_file }}"
|
|
when: ansible_distribution_release == 'focal'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix deb for Ubuntu 20.04 Xenial
|
|
apt: deb "/tmp/{{ ubuntu20_file }}"
|
|
when: ansible_distribution_release == 'focal'
|
|
tags: configure_zabbix
|
|
|
|
- name: install zabbix-agent 4.4 Ubuntu 20.04
|
|
apt:
|
|
name: zabbix-agent
|
|
state: latest
|
|
update_cache: yes
|
|
when: ansible_distribution_release == 'focal'
|
|
tags: configure_zabbix
|
|
|
|
##### enabled zabbix-agent
|
|
- name: enable service zabbix-agent and ensure it is not masked
|
|
systemd:
|
|
name: zabbix-agent
|
|
enabled: yes
|
|
masked: no
|
|
become: yes
|
|
tags: configure_zabbix
|
|
|
|
##### check zabbix home dir and shell
|
|
- name: Make sure a service is stopped
|
|
systemd: state=stopped name=zabbix-agent
|
|
become: yes
|
|
tags: configure_zabbix
|
|
|
|
- name: check zabbix home dir and shell
|
|
user:
|
|
name: zabbix
|
|
shell: /bin/bash
|
|
home: /etc/zabbix
|
|
append: yes
|
|
groups: sudo
|
|
become: yes
|
|
tags: configure_zabbix
|
|
|
|
##### mkdir /etc/zabbix/scripts and rights
|
|
- name: mkdir /etc/zabbix/scripts and rights
|
|
file:
|
|
path: /etc/zabbix/scripts
|
|
state: directory
|
|
owner: zabbix
|
|
group: zabbix
|
|
mode: 0700
|
|
become: yes
|
|
tags: configure_zabbix
|
|
|
|
##### change zabbix_agentd.conf
|
|
- name: change zabbix_agentd.conf Hostname
|
|
lineinfile:
|
|
path: /etc/zabbix/zabbix_agentd.conf
|
|
state: present
|
|
regexp: 'Hostname=Zabbix server'
|
|
line: "Hostname={{ ansible_hostname }}"
|
|
become: yes
|
|
tags: configure_zabbix
|
|
|
|
- name: change zabbix_agentd.conf ServerActive
|
|
lineinfile:
|
|
path: /etc/zabbix/zabbix_agentd.conf
|
|
state: present
|
|
regexp: 'ServerActive=127.0.0.1'
|
|
line: "ServerActive={{ zbx_srv }}"
|
|
become: yes
|
|
tags: configure_zabbix
|
|
|
|
- name: change zabbix_agentd.conf Server
|
|
lineinfile:
|
|
path: /etc/zabbix/zabbix_agentd.conf
|
|
state: present
|
|
regexp: 'Server=127.0.0.1'
|
|
line: "Server={{ zbx_srv }}"
|
|
become: yes
|
|
tags: configure_zabbix
|
|
|
|
- name: change zabbix_agentd.conf EnableRemoteCommands
|
|
lineinfile:
|
|
path: /etc/zabbix/zabbix_agentd.conf
|
|
state: present
|
|
regexp: '# EnableRemoteCommands=0'
|
|
line: 'EnableRemoteCommands=1'
|
|
become: yes
|
|
tags: configure_zabbix
|
|
|
|
- name: change zabbix_agentd.conf LogRemoteCommands
|
|
lineinfile:
|
|
path: /etc/zabbix/zabbix_agentd.conf
|
|
state: present
|
|
regexp: '# LogRemoteCommands=0'
|
|
line: 'LogRemoteCommands=1'
|
|
tags: configure_zabbix
|
|
|
|
##### Install Vulners plugin
|
|
### CentOS7
|
|
- name: install plugin repo centOS 7 rpm file
|
|
yum: name=https://repo.vulners.com/redhat/vulners-repo.rpm
|
|
when: ansible_os_family == "RedHat"
|
|
tags: configure_zabbix
|
|
|
|
- name: install plugin for centOS 7
|
|
yum: name=zabbix-threat-control-host
|
|
when: ansible_os_family == "RedHat"
|
|
tags: configure_zabbix
|
|
|
|
### Debian
|
|
#- name: download plugin deb file for Debian
|
|
# get_url:
|
|
# url: https://repo.vulners.com/debian/vulners-repo.deb
|
|
# dest: /tmp/vulners-repo.deb
|
|
# when: ansible_os_family == "Debian"
|
|
# tags: configure_zabbix
|
|
|
|
#- name: install plugin deb in Debian
|
|
# apt: deb="/tmp/vulners-repo.deb"
|
|
# when: ansible_os_family == "Debian"
|
|
# tags: configure_zabbix
|
|
|
|
#- name: install plugin Debian
|
|
# apt:
|
|
# name: zabbix-threat-control-host
|
|
# update_cache: yes
|
|
# when: ansible_os_family == "Debian"
|
|
# tags: configure_zabbix
|
|
|
|
### Starting zabbix-agent
|
|
- name: install needrestart
|
|
apt:
|
|
name: needrestart
|
|
update_cache: yes
|
|
when: ansible_os_family == "Debian"
|
|
tags: configure_zabbix
|
|
|
|
- name: Make sure a service is started
|
|
systemd: state=started name=zabbix-agent
|
|
become: yes
|
|
tags: configure_zabbix
|
|
- name: Copy configuration files
|
|
become: true
|
|
copy:
|
|
src: "{{ item.src }}"
|
|
dest: "{{ item.dest }}"
|
|
owner: root
|
|
group: root
|
|
mode: 6755
|
|
with_items:
|
|
- { src: "{{ role_path }}/files/check_updates.sh", dest: "/opt/zabbix_scripts/" }
|
|
- { src: "{{ role_path }}/files/zbx-reboot-required.sh", dest: "/opt/zabbix_scripts/" }
|
|
tags: configure_zabbix
|
|
- name: enable cron job for update check
|
|
become: true
|
|
cron:
|
|
name: "update_checker"
|
|
minute: "*/30"
|
|
user: root
|
|
job: "/opt/zabbix_scripts/check_updates.sh"
|
|
tags: configure_zabbix
|
|
|
|
- name: zabbix-agent-config
|
|
lineinfile:
|
|
path: "/etc/zabbix/zabbix_agentd.conf"
|
|
state: present
|
|
line: "{{ item.line }}"
|
|
with_items:
|
|
- { line: "UserParameter=os.updates.pending,cat \"/run/zabbix/zabbix.count.updates\"" }
|
|
- { line: "UserParameter=reboot-required.kernel,/opt/zabbix_scripts/zbx-reboot-required.sh -k" }
|
|
- { line: "UserParameter=reboot-required.services,/opt/zabbix_scripts/zbx-reboot-required.sh -s" }
|
|
become: true
|
|
tags: configure_zabbix
|
|
- name: Restart service zabbix-agent
|
|
service:
|
|
name: zabbix-agent
|
|
state: restarted
|
|
tags: configure_zabbix
|
|
become: true
|
|
|