diff --git a/ansible/08_3_nas_nfs.yml b/ansible/08_3_nas_nfs.yml index 7c8af70..2cebf08 100644 --- a/ansible/08_3_nas_nfs.yml +++ b/ansible/08_3_nas_nfs.yml @@ -27,11 +27,13 @@ state: directory mode: '0770' group: "{{ nfs_share_grp }}" - + - name: Настройка файла экспорта для {{ nfs_share }} - ansible.builtin.lineinfile: + ansible.builtin.blockinfile: path: /etc/exports - line: "{{ nfs_share }} *(rw,no_subtree_check,sec=krb5:krb5i:krb5p)" + block: | + {{ nfs_root }} *(ro,no_subtree_check,fsid=0) + {{ nfs_share }} *(rw,no_subtree_check,sec=krb5:krb5i:krb5p) - name: Обновление данных экспорта ansible.builtin.command: diff --git a/ansible/08_4_nas_clients.yml b/ansible/08_4_nas_clients.yml index eb44e02..8d686e8 100644 --- a/ansible/08_4_nas_clients.yml +++ b/ansible/08_4_nas_clients.yml @@ -16,3 +16,10 @@ name: nfs-client.target enabled: true state: restarted + + - name: Создание директории для монтирования NFS + ansible.builtin.file: + path: /mnt/nfs_share + state: directory + mode: '0770' + group: "{{ dir_share_grp }}" diff --git a/ansible/group_vars/all/mutable_vars.yml b/ansible/group_vars/all/mutable_vars.yml index e09f4bd..71a2c43 100644 --- a/ansible/group_vars/all/mutable_vars.yml +++ b/ansible/group_vars/all/mutable_vars.yml @@ -20,4 +20,6 @@ dc_details: # NFS nas_nfs_client_pkgs: - nfs-utils - - nfs-clients \ No newline at end of file + - nfs-clients + +dir_share_grp: "domain users" diff --git a/ansible/group_vars/nas/nas_vars.yml b/ansible/group_vars/nas/nas_vars.yml index 8284aeb..76c063e 100644 --- a/ansible/group_vars/nas/nas_vars.yml +++ b/ansible/group_vars/nas/nas_vars.yml @@ -21,6 +21,7 @@ nas_nfs_service: - nfs-server - rpcbind +nfs_root: /share nfs_share: /share/nfsshare nfs_share_grp: "domain users"