From 37440f1e1bb1ec00d45fd390ce77790850698dff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=94=D0=BE=D0=BB=D0=B3=D0=B8=D0=B9=20=D0=90=D1=80=D1=82?=
 =?UTF-8?q?=D1=91=D0=BC?= <artem@da2001.ru>
Date: Thu, 14 Sep 2023 11:07:48 +0300
Subject: [PATCH] mod

---
 ansible/08_3_nas_nfs.yml                | 8 +++++---
 ansible/08_4_nas_clients.yml            | 7 +++++++
 ansible/group_vars/all/mutable_vars.yml | 4 +++-
 ansible/group_vars/nas/nas_vars.yml     | 1 +
 4 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/ansible/08_3_nas_nfs.yml b/ansible/08_3_nas_nfs.yml
index 7c8af70..2cebf08 100644
--- a/ansible/08_3_nas_nfs.yml
+++ b/ansible/08_3_nas_nfs.yml
@@ -27,11 +27,13 @@
       state: directory
       mode: '0770'
       group: "{{ nfs_share_grp }}"
-  
+
   - name: Настройка файла экспорта для {{ nfs_share }}
-    ansible.builtin.lineinfile:
+    ansible.builtin.blockinfile:
       path: /etc/exports
-      line: "{{ nfs_share }} *(rw,no_subtree_check,sec=krb5:krb5i:krb5p)"
+      block: |
+        {{ nfs_root }} *(ro,no_subtree_check,fsid=0)
+        {{ nfs_share }} *(rw,no_subtree_check,sec=krb5:krb5i:krb5p)
 
   - name: Обновление данных экспорта
     ansible.builtin.command:
diff --git a/ansible/08_4_nas_clients.yml b/ansible/08_4_nas_clients.yml
index eb44e02..8d686e8 100644
--- a/ansible/08_4_nas_clients.yml
+++ b/ansible/08_4_nas_clients.yml
@@ -16,3 +16,10 @@
       name: nfs-client.target
       enabled: true
       state: restarted
+
+  - name: Создание директории для монтирования NFS
+    ansible.builtin.file:
+      path: /mnt/nfs_share
+      state: directory
+      mode: '0770'
+      group: "{{ dir_share_grp }}"
diff --git a/ansible/group_vars/all/mutable_vars.yml b/ansible/group_vars/all/mutable_vars.yml
index e09f4bd..71a2c43 100644
--- a/ansible/group_vars/all/mutable_vars.yml
+++ b/ansible/group_vars/all/mutable_vars.yml
@@ -20,4 +20,6 @@ dc_details:
 # NFS
 nas_nfs_client_pkgs:
   - nfs-utils
-  - nfs-clients
\ No newline at end of file
+  - nfs-clients
+
+dir_share_grp: "domain users"
diff --git a/ansible/group_vars/nas/nas_vars.yml b/ansible/group_vars/nas/nas_vars.yml
index 8284aeb..76c063e 100644
--- a/ansible/group_vars/nas/nas_vars.yml
+++ b/ansible/group_vars/nas/nas_vars.yml
@@ -21,6 +21,7 @@ nas_nfs_service:
   - nfs-server
   - rpcbind
 
+nfs_root: /share
 nfs_share: /share/nfsshare
 nfs_share_grp: "domain users"