mod

ansible/08_3_nas_nfs.yml

@@ -27,11 +27,13 @@
       state: directory
       mode: '0770'
       group: "{{ nfs_share_grp }}"
-  
+
   - name: Настройка файла экспорта для {{ nfs_share }}
-    ansible.builtin.lineinfile:
+    ansible.builtin.blockinfile:
       path: /etc/exports
-      line: "{{ nfs_share }} *(rw,no_subtree_check,sec=krb5:krb5i:krb5p)"
+      block: |
+        {{ nfs_root }} *(ro,no_subtree_check,fsid=0)
+        {{ nfs_share }} *(rw,no_subtree_check,sec=krb5:krb5i:krb5p)
 
   - name: Обновление данных экспорта
     ansible.builtin.command:

ansible/08_4_nas_clients.yml

@@ -16,3 +16,10 @@
       name: nfs-client.target
       enabled: true
       state: restarted
+
+  - name: Создание директории для монтирования NFS
+    ansible.builtin.file:
+      path: /mnt/nfs_share
+      state: directory
+      mode: '0770'
+      group: "{{ dir_share_grp }}"

ansible/group_vars/all/mutable_vars.yml

@@ -20,4 +20,6 @@ dc_details:
 # NFS
 nas_nfs_client_pkgs:
   - nfs-utils
-  - nfs-clients
+  - nfs-clients
+
+dir_share_grp: "domain users"

ansible/group_vars/nas/nas_vars.yml

@@ -21,6 +21,7 @@ nas_nfs_service:
   - nfs-server
   - rpcbind
 
+nfs_root: /share
 nfs_share: /share/nfsshare
 nfs_share_grp: "domain users"