numerous improvements

roles/easyredmine/tasks/database.yml

@@ -14,6 +14,8 @@
 - mysql_db: name='{{ redmine_db_name }}'
             state=present
             encoding=utf8
+            login_user='{{ mysql_admin_login }}'
+            login_password='{{ mysql_admin_password }}'
   sudo: yes
   register: redmine_db_created
 
@@ -34,6 +36,8 @@
   mysql_db: name='{{ redmine_db_name }}'
             state=import
             target='{{ _redmine_db_import_file }}'
+            login_user='{{ mysql_admin_login }}'
+            login_password='{{ mysql_admin_password }}'
   register: redmine_db_import
   when: do_redmine_db_import == True and (redmine_db_import_done.stat.exists == False or redmine_db_created|changed)
   
@@ -41,7 +45,7 @@
         state=touch
   when: do_redmine_db_import == True and redmine_db_import_done.stat.exists == False and redmine_db_import|success 
 
-- name: create db user
+- name: create redmine db user
   mysql_user: name='{{ redmine_db_user }}'
               password='{{ redmine_db_password }}'
               append_privs=yes

roles/easyredmine/tasks/firewall.yml

@@ -1,6 +1,7 @@
 
 - service: name=firewalld
            state=started
+           enabled=yes
   sudo: yes
 
 - firewalld: service=https
@@ -14,3 +15,25 @@
              state=enabled
   sudo: yes
   notify: restart firewalld
+
+- firewalld: rich_rule='rule service name="ssh" family="ipv4" source address="{{ item }}" accept'
+             permanent=true
+             state=enabled
+  with_items:
+    - 128.192.75.0/24
+    - 192.168.0.0/16
+    - 172.16.0.0/16
+    - 128.91.49.0/24
+  sudo: yes
+  notify: restart firewalld
+
+- firewalld: service=ssh
+             permanent=true
+             state=disabled
+  sudo: yes
+  notify: restart firewalld
+
+- name: restart firewalld
+  service: name=firewalld
+           state=restarted
+  sudo: yes

roles/easyredmine/tasks/main.yml

@@ -1,11 +1,13 @@
 ---
 
+- include: system.yml
+
 - include: firewall.yml
 
 - include: database.yml
+  when: do_database_management == True
 
 - include: redmine.yml
 
 - include: nginx.yml
 
-- include: system.yml

roles/easyredmine/tasks/nginx.yml

@@ -38,4 +38,5 @@
 
 - service: name=nginx
            state=started
+           enabled=yes
   sudo: yes

roles/easyredmine/tasks/redmine.yml

@@ -2,6 +2,7 @@
   yum: name='{{ item }}'
   sudo: yes
   with_items:
+    - mysql-devel
     - unzip
     - rubygems
     - ruby-devel
@@ -14,6 +15,7 @@
 - name: install bundler, redmine-installer gems
   gem: name='{{ item }}'
        user_install=no
+       executable=/usr/local/bin/gem # RVM's version
   sudo: yes
   with_items:
     - bundler
@@ -27,7 +29,7 @@
 
 - name: download installer
   get_url: url='{{ installer_package_url }}'
-           dest='{{ cache_dir }}'
+           dest='{{ remote_scratch_path }}'
            mode=0640
            force=no
   when: has_installer_package.stat.exists == False
@@ -54,18 +56,29 @@
   register: mk_redmine_root_dir
 
 - name: run redmine installer
-  command: '{{ _redmine_install_wrapper }}'
+  shell: 'source ~/.bash_profile && {{ _redmine_install_wrapper }}'
   when: mk_redmine_root_dir|changed and do_redmine_installer == True
+  register: installer_run
   sudo: no
-  environment:
-    PATH: "{{ ansible_env.PATH }}:~/bin"
 
 - copy: dest='/opt/easyredmine/lib/tasks/ebrc_settings.rake'
         src='ebrc_settings.rake'
   sudo: yes
 
+- name: restrict config permissions
+  file: path='{{ redmine_root_dir }}/config'
+        mode=0770
+  
 - name: Configuring Redmine with eupath preferences
   command: 'rake redmine:ebrc_settings RAILS_ENV=production'
   args:
     chdir: '{{ redmine_root_dir }}'
   sudo: no
+  when: do_redmine_installer == True
+
+- name: adding crontab
+  cron: name="redmine tasks"
+        minute="*/15"
+        job='cd {{ redmine_root_dir }} && /usr/local/bin/bundle exec rake easyproject:scheduler:run_tasks RAILS_ENV=production > /dev/null'
+        user='{{ redmine_owner }}'
+  sudo: yes

roles/easyredmine/tasks/system.yml

@@ -7,4 +7,34 @@
     - rsync
     - strace
     - nmap
+    - yum-utils
+    - sendmail
+    - at
+    - nfs-utils
+    - vim-enhanced
+    - tmpwatch
+    - ntpdate
+    - cronie-noanacron
+    - ruby
+    - mailx
+    - crontabs
+    - logrotate
+    - which
+    - net-tools
+    - lsof
+    - screen
+    - mlocate
+
+- service: name=sendmail
+           state=started
+           enabled=yes
+  sudo: yes
+
+- name: set up redmine user mail aliases
+  lineinfile: >
+    dest=/etc/aliases
+    regexp="\b{{ redmine_owner }}"
+    line="{{ redmine_owner }}: {{ redmine_mail_alias }}"
+  sudo: yes
+  notify: rebuild mail aliases