43 lines
955 B
YAML
43 lines
955 B
YAML
|
---
|
||
|
|
- name: Uninstall OpenQA packages
|
||
|
|
ansible.builtin.yum:
|
||
|
|
name: "{{ openqa_packages }}"
|
||
|
|
state: absent
|
||
|
|
|
||
|
|
- name: Delete OpenQA files and directories
|
||
|
|
ansible.builtin.file:
|
||
|
|
path: "{{ item }}"
|
||
|
|
state: absent
|
||
|
|
loop:
|
||
|
|
- "{{ openqa_homedir }}"
|
||
|
|
- /var/lib/pgsql
|
||
|
|
- /etc/openqa
|
||
|
|
- /etc/httpd/conf.d/openqa.conf
|
||
|
|
- /etc/httpd/conf.d/openqa-ssl.conf
|
||
|
|
|
||
|
|
- name: Disable httpd_can_network_connect
|
||
|
|
ansible.posix.seboolean:
|
||
|
|
name: httpd_can_network_connect
|
||
|
|
state: false
|
||
|
|
persistent: true
|
||
|
|
|
||
|
|
- name: Deny traffic for services
|
||
|
|
ansible.posix.firewalld:
|
||
|
|
service: "{{ item }}"
|
||
|
|
permanent: true
|
||
|
|
state: disabled
|
||
|
|
loop:
|
||
|
|
- http
|
||
|
|
- openqa-vnc
|
||
|
|
|
||
|
|
- name: Deny VNC traffic for local workers
|
||
|
|
ansible.posix.firewalld:
|
||
|
|
port: "{{ openqa_min_vnc_port }}-{{ openqa_max_vnc_port }}/tcp"
|
||
|
|
permanent: true
|
||
|
|
state: disabled
|
||
|
|
|
||
|
|
- name: Reload FirewallD
|
||
|
|
ansible.builtin.systemd:
|
||
|
|
name: firewalld
|
||
|
|
state: reloaded
|