summaryrefslogtreecommitdiffstats
path: root/roles/torrelay/tasks/main.yml
blob: cd66d279097734bc1a86c1e8da209c24b46b10bb (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
- name: Installation du paquet Tor depuis torproject.org
  yum: name=https://deb.torproject.org/torproject.org/rpm/el/{{ ansible_distribution_major_version }}/{{ ansible_architecture }}/tor-{{ versionupstream }}-tor.1.rh6_6.{{ ansible_architecture }}.rpm state=present
  when: ansible_distribution == "CentOS" and ansible_distribution_major_version|int == 6

- name: Installation du paquet Tor depuis le dépôt
  yum: name=tor state=present
  when: ansible_distribution == "Fedora"

- name: Installation de paquets optionnels depuis le dépôt
  yum: name={{ item }} state=present
  with_items:
    - tor-arm
    - proxychains
  when: ansible_distribution == "Fedora"

- name: Configuration de proxychains
  copy: src=proxychains.conf dest=/etc/proxychains.conf
        mode=644
  when: ansible_distribution == "Fedora"

- name: Création des répertoires de base
  file: path=/usr/local/share/tor state=directory

- name: Installation de la page d'accueil html
  copy: src=tor-exit-notice.html dest=/usr/local/share/tor/tor-exit-notice.html
        mode=644

- name: Configuration du service
  template: src=keys.j2 dest=/etc/tor/torrc
            owner=root
            group=root
            mode=644
  notify: restart tor

- name: Ouverture des ports Firewalld
  firewalld: port={{ item[0] }} permanent={{ item[1] }} state=enabled
  with_nested:
    - [ '9001/tcp', '9030/tcp' ]
    - [ 'true', 'false' ]
  when: ansible_distribution == "Fedora" and is_public is defined

- name: Déploiement du module SELinux pour hidden_services
  copy: src=tor-selinux-f22-policy-module.pp dest=/root/tor-selinux-f22-policy-module.pp
        mode=644
  when: ansible_distribution == "Fedora"

- name: Activation et démarrage du relai Tor
  service: name=tor state=started enabled=yes