---
- name: install packages
  hosts: dev,test,prod
  tasks:
    - name: instal pkgs task1
      yum:
        name: 
          - php
          - mariadb
        state: present
        
- name: install pkgs task2
  hosts: dev
  tasks: 
    - name: use yum moudle
      yum: 
        name: "@RPM Development Tools"
        state: latest
    - name: update all pkgs
      yum: 
        name: "*"
        state: latest

---
- name: install packages
  hosts: dev,test,prod
  tasks:
    - name: instal pkgs task1
      yum:
        name: 
          - php
          - mariadb
        state: present
        
    - name: use yum moudle
      yum: 
        name: "@RPM Development Tools"
        state: latest
      when: '"dev" in group_names'
    - name: update all pkgs
      yum: 
        name: "*"
        state: latest
      when: '"dev" in group_names'

---
- name: use system roles
  hosts: all
  vars:
    timesync_ntp_servers:
      - hostname: 172.25.254.254
        iburst: yes
  roles:
    - rhel-system-roles.timesync

---
- name: set selinux
  hosts: all
  vars:
    selinux_policy: targeted
    selinux_state: enforcing
  roles:
    - rhel-system-roles.selinux

- src: http://rhgls.domainx.example.com/materials/haproxy.tar
  name: balancer
  
- src: http://rhgls.domainx.example.com/materials/phpinfo.tar
  name: phpinfo

--- 
- name: install pkgs
  yum:
    name: httpd
    state: latest

- name: enable service
  service:
    name: httpd
    state: started
    enabled: yes
   
- name: enable firewalld service
  service:
    name: firewalld
    state: started
    enabled: yes
    
- name: set firewalld
  firewalld:
    service: http
    immediate: yes
    permanent: yes
    state: enabled
    
- name: set pages
  template: 
    src: index.html.j2
    dest: /var/www/html/index.html

--- 
- name: use apache roles
  hosts: webservers
  roles: 
    - apache

---
- name: use phpinfo role
  hosts: webservers
  roles: 
    - phpinfo
- name: use haproxy role
  hosts: balancers
  roles:
    - balancer

---
- name: create lv
  hosts: all
  tasks:
    - block: 
      - name: create a lv use research vg
        lvol:
          vg: research 
          lv: data
          size: 1500
      - name: format ext4 fs
        filesystem: 
          fstype: ext4
          dev: /dev/research/data
      rescue:
        - name: output some info
          debug:
            msg: "Could not create logical volume of that size"
          when: ansible_lvm.vgs.research is defined
        - name: create a lv use research vg
          lvol: 
            vg: research
            lv: data
            size: 800
          when: ansible_lvm.vgs.research is defined
        - name: format ext4 fs
          filesystem:
            fstype: ext4
            dev: /dev/research/data
          when: ansible_lvm.vgs.research is defined
        - name: output some info
          debug:
            msg: "Volume group does not exist"
          when: ansible_lvm.vgs.research is undefined

---
- name: deploy
  hosts: all
  tasks:
    - name: template a host file
      template:
        src: hosts.j2
        dest: /etc/myhosts
      when: '"dev" in group_names'

---
- name: modify file content
  hosts: all
  tasks: 
    - copy:
        content: Development
        dest: /etc/issue
      when: '"dev" in group_names'
    - copy:
        content: Test
        dest: /etc/issue
      when: '"test" in group_names'
    - copy:
        content: Production
        dest: /etc/issue
      when: '"prod" in group_names'

---
- name: set web content
  hosts: dev
  tasks: 
    - name: create a directory
      file:
        path: /webdev
        state: directory
        group: webdev
        mode: "2775"
    - name: create a soft link
      file: 
        src: /webdev
        dest: /var/www/html/webdev
        state: link
    - name: set web content
      copy:
        content: Development
        dest: /webdev/index.html
        setype: "httpd_sys_content_t"
    - name: start httpd service
      service:
        name: httpd
        state: started
        enabled: yes
    - name: set firewall rule to allow http traffix
      firewalld: 
        service: http
        permanent: yes
        immediate: yes
        state: enabled

---
- name: create hardware report
  hosts: all
  vars:
    hardware:
      - hw_name: HOST
        hw_info: "{{ ansible_hostname }}"
      - hw_name: MEMORY
        hw_info: "{{ ansible_memtotal_mb }}"
      - hw_name: BIOS
        hw_info: "{{ ansible_bios_version }}"
      - hw_name: DISK_SIZE_VDA
        hw_info: "{{ ansible_devices['vda']['size'] | default('NONE') }}"
      - hw_name: DISK_SIZE_VDB
        hw_info: "{{ ansible_devices['vdb']['size'] | default('NONE') }}"
  tasks:
    - name: get hw report from url
      get_url:
        url: http://rhgls.domainx.example.com/materials/hwreport.empty
        dest: /root/hwreport.txt
    - name: set hw report content
      lineinfile:
        path: /root/hwreport.txt
        regexp: "^{{ item['hw_name'] }}="
        line: "{{ item['hw_name'] }}={{ item['hw_info'] }}"
      loop: "{{ hardware }}"

---
- name: create user on dev and test
  hosts: dev,test
  vars_files:
    - locker.yml
    - user_list.yml
  tasks:
    - name: create group
      group:
        name: devops
    - name: create user
      user:
        name: "{{ item['name'] }}"
        password: "{{ pw_developer | password_hash('sha512','mysecretsalt') }}"
        groups: devops
      loop: "{{ users }}"
      when: item.job == 'developer'

- name: create user on prod
  hosts: prod
  vars_files:
    - locker.yml
    - user_list.yml
  tasks:
    - name: create group
      group:
        name: opsmgr
    - name: create user
      user:
        name: "{{ item['name'] }}"
        password: "{{ pw_manager | password_hash('sha512','mysecretsalt') }}"
        uid: 6666
        groups: opsmgr
      loop: "{{ users }}"
      when: item.job == 'manager'

---
- name:
  hosts: all
  tasks:
    - name: create user
      user:
        name: natasha
    - name: set cron
      cron:
        user: natasha
        minute: "*/2"
        job: logger "EX294 in progress"