diff options
| author | Jan Tuomi <jan@jantuomi.fi> | 2026-05-16 19:19:07 +0300 |
|---|---|---|
| committer | Jan Tuomi <jan@jantuomi.fi> | 2026-05-16 19:19:07 +0300 |
| commit | 75732c1a9aa1fed11794f509d33bdea5171d41c0 (patch) | |
| tree | 057717d5e3010b77f15b9fd36806e691fbfc0853 /roles/jails/09_redis | |
| parent | b97ed17f3747345ccf83ddd7c2b4349f43c73e98 (diff) | |
Set up redis jail, improve role setup
Diffstat (limited to 'roles/jails/09_redis')
| -rw-r--r-- | roles/jails/09_redis/defaults/main.yml | 6 | ||||
| -rw-r--r-- | roles/jails/09_redis/handlers/main.yml | 4 | ||||
| -rw-r--r-- | roles/jails/09_redis/tasks/main.yml | 26 |
3 files changed, 36 insertions, 0 deletions
diff --git a/roles/jails/09_redis/defaults/main.yml b/roles/jails/09_redis/defaults/main.yml index 5416267..bb34d92 100644 --- a/roles/jails/09_redis/defaults/main.yml +++ b/roles/jails/09_redis/defaults/main.yml @@ -1 +1,7 @@ userland: "15.0-RELEASE" + +pkg: + - valkey + +services: + - valkey diff --git a/roles/jails/09_redis/handlers/main.yml b/roles/jails/09_redis/handlers/main.yml new file mode 100644 index 0000000..0ad139c --- /dev/null +++ b/roles/jails/09_redis/handlers/main.yml @@ -0,0 +1,4 @@ +- name: Restart valkey + service: + name: valkey + state: restarted diff --git a/roles/jails/09_redis/tasks/main.yml b/roles/jails/09_redis/tasks/main.yml index 2abdaff..9e79df1 100644 --- a/roles/jails/09_redis/tasks/main.yml +++ b/roles/jails/09_redis/tasks/main.yml @@ -1,2 +1,28 @@ - import_role: name: jail + tasks_from: jail_setup + +- name: Configure bind address + lineinfile: + path: /usr/local/etc/valkey.conf + line: "bind * -::*" + regexp: "^bind " + notify: Restart valkey + +- name: Configure protected-mode + lineinfile: + path: /usr/local/etc/valkey.conf + line: "protected-mode yes" + regexp: "^protected-mode" + notify: Restart valkey + +- name: Configure requirepass + lineinfile: + path: /usr/local/etc/valkey.conf + line: "requirepass {{ valkey_password }}" + regexp: "^requirepass" + notify: Restart valkey + +- import_role: + name: jail + tasks_from: jail_launch |