rainbowsheep-cloud/roles/nfs/tasks/main.yml

36 lines
815 B
YAML

---
- name: Install nfs server
ansible.builtin.apt:
name: nfs-kernel-server
state: present
update_cache: yes
- name: Create /srv/protected export
ansible.builtin.file:
state: directory
path: /srv/protected
- name: Export /srv/protected
ansible.builtin.lineinfile:
path: /etc/exports
regexp: '^/srv/protected'
line: /srv/protected *(rw,sync,sec=krb5p,no_subtree_check)
- name: Create /srv/vault export
ansible.builtin.file:
state: directory
path: /srv/vault
- name: Export /srv/vault
ansible.builtin.lineinfile:
path: /etc/exports
regexp: '^/srv/vault'
line: /srv/vault *(rw,sync,sec=krb5p:krb5i:krb5,no_subtree_check)
- name: Enable and start NFS server
ansible.builtin.service:
name: nfs-kernel-server
state: started
enabled: yes