playbook实战优化

环境准备

先决条件

1.首先在根目录下创建一个ansible_project 目录
[Tue Aug 17 04:17:56 root@m01 /]
 # mkdir /ansible_project
 
 2.进入到该目录下
[Tue Aug 17 04:17:56 root@m01 /]
 # cd /ansible_project/

 3.再该目录下分别创建需要准备的各项目的目录
[Tue Aug 17 04:19:25 root@m01 /ansible_project]
 # mkdir sersync
   mkdir mariadb
   mkdir nfs
   mkdir nginx
   mkdir php
   mkdir rsync
   
   4.因为是先安装rsync 所以我们先配置rsync项目，进入到rsync目录中
   [Tue Aug 17 04:38:50 root@m01 /ansible_project/rsync]
 # cp /root/ansible/rsyncd.conf   /ansible_project/rsync
 
[Tue Aug 17 05:31:21 root@m01 /ansible_project]
 # vim rsync/install_rsync.yml 
- name: Install Rsyncd 
  yum:
    name: "{{ pkg }}"
    state: present
  when: ansible_hostname == 'backup' or ansible_ho
stname == 'nfs'
  
[Tue Aug 17 05:15:28 root@m01 /ansible_project/rsync]
 # vim config_rsync.yml 
- name: Configure Rsyncd Conf
  copy:
    src: /ansible_project/rsync/rsyncd.conf
    dest: /etc/rsyncd.conf
  notify: Restarted rsyncd
  when: ansible_hostname == 'backup'

- name: Create Passwd File
  copy:
    content: rsync_backup:123
    dest: /etc/rsync.passwd
    mode: 0600
  when: ansible_hostname == 'backup'

- name: Create backup Directory
  file:
    path: /backup
    owner: www
    group: www
    state: directory
  when: ansible_hostname == 'backup'
  
[Tue Aug 17 05:17:05 root@m01 /ansible_project/rsync]
 # vim start_rsync.yml 
- name: Start Rsync
  service:
    name: rsyncd
    state: started
    enabled: yes
  when: ansible_hostname == 'backup'
    
   
[Tue Aug 17 05:13:39 root@m01 /ansible_project]
 # vim task.yml 
- hosts: all
  tasks:
    - include_tasks: rsync/install_rsync.yml
    - include_tasks: rsync/config_rsync.yml
    - include_tasks: rsync/start_rsync.yml
 
   
   
[Tue Aug 17 05:23:28 root@m01 /ansible_project]
 # mkdir group_vars
    mkdir host_vars
   
[Tue Aug 17 05:23:58 root@m01 /ansible_project]
 # vim host_vars/backup
pkg: rsync

[Tue Aug 17 05:26:55 root@m01 /ansible_project]
 # vim host_vars/nfs
pkg: rsync

nfs项目

[Tue Aug 17 05:38:51 root@m01 /ansible_project/nfs]
 # vim install_nfs.yml
- name: Install NFS
  yum:
    name: nfs-utils
    state: present
  when:
    - ansible_hostname == 'web01'
    - ansible_hostname == 'web02'
    - ansible_hostname == 'backup'
    - ansible_hostname == 'nfs'
    
[Tue Aug 17 06:13:10 root@m01 /ansible_project/nfs]
 # vim config_nfs.yml 
- name: Configure NFS Server
  copy:
    content: /data 172.16.1.0/24(rw,sync,all_squas
h,anonuid=666，anongid=666)
    dest: /etc/exports
  notify: Restarted nfs-utils
  when: ansible_hostname == 'nfs' or ansible_hostname == 'backup'

- name: Greate NFS Directory
  file:
    path: /data
    state: directory
    owner: www
    group: www
    mode: 0755
  when: ansible_hostname == 'nfs' or ansible_hostn
ame == 'backup'


- name: Create App Dirctory
  file:
    path: /app
    state: directory
  when: ansible_hostname == 'nfs'

[Tue Aug 17 05:52:14 root@m01 /ansible_project/nfs]
 # vim start_nfs.yml
- name: Start NFS Server
  service:
    name: nfs-server
    state: started
    enabled: yes
  when: ansible_hostname == 'nfs' or ansible_hostname == 'backup'
  
[Tue Aug 17 06:00:48 root@m01 /ansible_project]
 # vim task.yml 
- hosts: all
  tasks:
    - include_tasks: rsync/install_rsync.yml
    - include_tasks: rsync/config_rsync.yml
    - include_tasks: rsync/start_rsync.yml
    - include_tasks: nfs/install_nfs.yml
    - include_tasks: nfs/config_nfs.yml
    - include_tasks: nfs/start_nfs.yml

  handlers:
    - name: Restarted rsyncd
      service:
        name: rsyncd
        state: restarted

    - name: Restarted nfs-utils
      service:
        name: nfs-utils
        state: restarted

sersync项目

[Tue Aug 17 06:17:25 root@m01 /ansible_project/sersync]
 # cp /root/ansible/sersync2.5.4_64bit_binary_stable_final.tar.gz .
 [Tue Aug 17 06:22:30 root@m01 /ansible_project/sersync]
 # cp /root/ansible/conf.xml .
[Tue Aug 17 06:22:30 root@m01 /ansible_project/sersync]
cp /root/ansible/sersyncd.service .
 
[Tue Aug 17 06:17:56 root@m01 /ansible_project/sersync]
 # vim install_sersync.yml
- name: Install Sersync Server
  unarchive:
    src: /ansible_project/sersync/sersync2.5.4_64b
it_binary_stable_final.tar.gz
    dest: /app
  when: ansible_hostname == 'nfs'
  
[Tue Aug 17 06:22:55 root@m01 /ansible_project/sersync]
 # vim config_sersync.yml
- name: Configure Sersync Conf
  copy:
    src: /ansible_project/sersync/conf.xml
    dest: /app/GNU-Linux-x86/confxml.xml
    mode: 0755
  notify: Restarted sersyncd
  when: ansible_hostname == 'nfs'

- name: Push Sersync Start Shell
  copy: 
    src:
    /ansible_project/nfs/sersyncd.service
    dest: /usr/lib/systemd/system
  when: ansible_hostname == 'nfs'

- name: Create Rsyncd Password File
  copy:
    content: "123"
    dest: /etc/rsync.passwd
    mode: 0600 
  when: ansible_hostname == 'nfs'
  
[Tue Aug 17 06:32:08 root@m01 /ansible_project/sersync]
 # vim start_sersync.yml
- name: Start Sersync
  service:
    name: sersyncd
    state: started
    enabled: yes
  when: ansible_hostname == 'nfs'
  
[Tue Aug 17 06:35:00 root@m01 /ansible_project]
 # vim task.yml 
- hosts: all
  tasks:
    - include_tasks: rsync/install_rsync.yml
    - include_tasks: rsync/config_rsync.yml
    - include_tasks: rsync/start_rsync.yml
    - include_tasks: nfs/install_nfs.yml
    - include_tasks: nfs/config_nfs.yml
    - include_tasks: nfs/start_nfs.yml
    - include_tasks: sersync/install_sersync.yml
    - include_tasks: sersync/config_sersync.yml
    - include_tasks: sersync/start_sersync.yml

  handlers:
    - name: Restarted rsyncd
      service:
        name: rsyncd
        state: restarted

    - name: Restarted nfs-utils
      service:
        name: nfs-utils
        state: restarted

    - name: Restarted sersyncd
      service:
        name: sersyncd
        state: restarted

db01

[Tue Aug 17 06:41:31 root@m01 /ansible_project/mariadb]
 # vim install_db01.yml
- name: Install Maraidb
  yum:
    name:
      - mariadb-server
      - MySQL-python
    state: present
  when: ansible_hostname == 'db01'
  
[Tue Aug 17 06:46:48 root@m01 /ansible_project/mariadb]
 # vim start_db01.yml
- name: Start Maraidb
  service:
    name: mariadb
    state: started
    enabled: yes
  when: ansible_hostname == 'db01'

- name: Create wordpress Database
  mysql_db:
    name: wordpress
    state: present
    encoding: utf8
  when: ansible_hostname == 'db01'

- name: Create wordpress User
  mysql_user:
    name: wordpress
    state: present
    priv: "wordpress.*:ALL"
    host: "%"
    password: "123"
  when: ansible_hostname == 'db01'

[Tue Aug 17 06:52:35 root@m01 /ansible_project]
 # vim task.yml 
    - include_tasks: rsync/start_rsync.yml
    - include_tasks: nfs/install_nfs.yml
    - include_tasks: nfs/config_nfs.yml
    - include_tasks: nfs/start_nfs.yml
    - include_tasks: sersync/install_sersync.yml
    - include_tasks: sersync/config_sersync.yml
    - include_tasks: sersync/start_sersync.yml
    - include_tasks: mariadb/install_db01.yml
    - include_tasks: mariadb/start_db01.yml

  handlers:
    - name: Restarted rsyncd
      service:
        name: rsyncd
        state: restarted

    - name: Restarted nfs-utils
      service:
        name: nfs-utils
        state: restarted

    - name: Restarted sersyncd
      service:
        name: sersyncd

nginx

[Tue Aug 17 06:58:37 root@m01 /ansible_project/nginx]
 # vim install_nginx.yml
- name: Install nginx
  yum:
    name: nginx
    state: present
  when: ansible_hostname == 'web01' or ansib
le_hostname == 'web02'

[Tue Aug 17 07:23:06 root@m01 /ansible_project/nginx]
 # cp /root/ansible/nginx.conf .
[Tue Aug 17 07:23:16 root@m01 /ansible_project/nginx]
 # cp /root/ansible/blog.wk.com.conf .
 
[Tue Aug 17 07:46:34 root@m01 /ansible_project/nginx]
 # vim push.yml 
- name: Push All Conf
  copy:
    src: "{{ item.src }}"
    dest: "{{ item.dest }}"
  with_items:
    - {src: "/ansible_project/nginx/nginx.conf",dest: "/etc/nginx/nginx.conf"}
    - {src: "/ansible_project/nginx/blog.wk.com.conf",dest: "/etc/nginx/conf.d/blog.drz.com.conf"}
    - {src: "/ansible_project/php/www.conf",dest: "/etc/php-fpm.d/www.conf"} 
  tags:
    - manager_nginx_server
  notify: Restart nginx
  when: ansible_hostname is match 'web*'

- name: Create Code Directory
  file:
    path: /code
    state: directory
    owner: www
    group: www
    mode: 0755
  when: ansible_hostname is match 'web*'

- name: Push code
  unarchive:
    src: /ansible_project/nginx/wordpress-5.7.2-zh_CN.tar.gz
    dest: /code
    owner: www
    group: www
  when: ansible_hostname is match 'web*'

- name: Create uploads Directory
  file:
    path: /code/wordpress/wp-content/uploads
    state: directory
    owner: www
    group: www
  when: ansible_hostname is match 'web*'
[Tue Aug 17 07:46:59 root@m01 /ansible_project/nginx]

[Tue Aug 17 07:46:59 root@m01 /ansible_project/nginx]
 # vim start_nginx.yml
- name: Start Nginx
  sercive:
    name: nginx
    state: started
    enabled: yes
  when: ansible_hostname is match 'web*'

- name: Mount Code Dirctory
  mount:
    path: /code/wordpress/wp-content/uploads
    src: 172.16.1.31:/data
    fstype: nfs
    state: mounted
  when: ansible_hostname is match 'web*'

- name: Shouquan
  file:
    path: /var/lib/nginx
    owner: www
    group: www
    recurse: yes
  when: ansible_hostname is match 'web*'
  
[Tue Aug 17 08:04:33 root@m01 /ansible_project]
 # cat task.yml 
- hosts: all
  tasks:
    - include_tasks: rsync/install_rsync.yml
    - include_tasks: rsync/config_rsync.yml
    - include_tasks: rsync/start_rsync.yml  
    - include_tasks: nfs/install_nfs.yml
    - include_tasks: nfs/config_nfs.yml
    - include_tasks: nfs/start_nfs.yml
    - include_tasks: sersync/install_sersync.yml
    - include_tasks: sersync/config_sersync.yml
    - include_tasks: sersync/start_sersync.yml
    - include_tasks: mariadb/install_db01.yml
    - include_tasks: mariadb/start_db01.yml
    - include_tasks: nginx/install_nginx.yml
    - include_tasks: nginx/start_nginx.yml
    - include_tasks: nginx/push.yml
    - include_tasks: php/install_php.yml
    - include_tasks: php/push_php.yml
    - include_tasks: php/start_php.yml

  handlers: 
    - name: Restarted rsyncd
      service:
        name: rsyncd
        state: restarted

    - name: Restarted nfs-utils
      service:
        name: nfs-utils
        state: restarted

    - name: Restarted sersyncd
      service:
        name: sersyncd
        state: restarted

    - name: Restart nginx
      service: 
        name: nginx
        state: reloaded

php

[Tue Aug 17 07:03:00 root@m01 /ansible_project/php]
 # vim push_php.yml
- name: Push PHP
  unarchive:
    src: /ansible_project/php/php.tgz
    dest: /tmp
  when: ansible_hostname == 'web01' or ansible_hostname == 'web02'

Tue Aug 17 07:06:28 root@m01 /ansible_project/php]
 # vim install_php.yml
- name: Install PHP
  shell: 'rpm -Uvh /tmp/*.rpm'
  ignore_errors: yes
  when: ansible_hostname == 'web01' or ansible_hostname == 'web02'
  
[Tue Aug 17 07:51:28 root@m01 /ansible_project/php]
 # vim start_php.yml 
- name: Start PHP
  service:
    name: php-fpm
    state: started
    enabled: yes
  when: ansible_hostname is match 'web*'

- name: Chmod Sock
  file:
    path: /dev/shm/php71w.sock
    owner: www
    group: www
  when: ansible_hostname is match 'web*'

创建统一用户关闭selinux和防火墙

[Tue Aug 17 08:13:23 root@m01 /ansible_project]
 # mkdir youhua
  cd youhua


[Tue Aug 17 08:09:55 root@m01 /ansible_project/youhua]
 # vim youhua.yml 
- name: Greate www Group
  group:
    name: www
    gid: 666
    state: present
- name: Greate www user
  user:
    name: www      
    uid: 666
    group: www
    shell: /sbin/nologin     
    state: present
    create_home: no
        
[Tue Aug 17 08:13:49 root@m01 /ansible_project]
 # vim task.yml 
- hosts: all
  tasks:
    - include_tasks: youhua/youhua.yml
    - include_tasks: rsync/install_rsync.yml
    - include_tasks: rsync/config_rsync.yml
    - include_tasks: rsync/start_rsync.yml
    - include_tasks: nfs/install_nfs.yml
    - include_tasks: nfs/config_nfs.yml
    - include_tasks: nfs/start_nfs.yml
    - include_tasks: sersync/install_sersync.yml
    - include_tasks: sersync/config_sersync.yml
    - include_tasks: sersync/start_sersync.yml
    - include_tasks: mariadb/install_db01.yml
    - include_tasks: mariadb/start_db01.yml
    - include_tasks: nginx/install_nginx.yml
    - include_tasks: nginx/start_nginx.yml
    - include_tasks: nginx/push.yml
    - include_tasks: php/install_php.yml
    - include_tasks: php/push_php.yml
    - include_tasks: php/start_php.yml

  handlers: 
    - name: Restarted rsyncd
      service:
        name: rsyncd
        state: restarted

    - name: Restarted nfs-utils
      service:
        name: nfs-utils
        state: restarted

    - name: Restarted sersyncd
      service:
        name: sersyncd
        state: restarted

    - name: Restart nginx
      service: 
        name: nginx
        state: reloaded