Main

ansible/ansible.cfg

@@ -0,0 +1,9 @@
+[defaults]
+inventory         = /home/diploma1/.ansible/hosts
+host_key_checking = false
+remote_user       = diploma1
+private_key_file  = ~/.ssh/id_ed25519
+pipelining        = True
+
+[privilege_escalation]
+become            = True

ansible/elastic-conf.yaml

@@ -0,0 +1,101 @@
+# ======================== Elasticsearch Configuration =========================
+#
+# NOTE: Elasticsearch comes with reasonable defaults for most settings.
+#       Before you set out to tweak and tune the configuration, make sure you
+#       understand what are you trying to accomplish and the consequences.
+#
+# The primary way of configuring a node is via this file. This template lists
+# the most important settings you may want to configure for a production cluster.
+#
+# Please consult the documentation for further information on configuration options:
+# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
+#
+# ---------------------------------- Cluster -----------------------------------
+#
+# Use a descriptive name for your cluster:
+#
+cluster.name: diploma1
+#
+# ------------------------------------ Node ------------------------------------
+#
+# Use a descriptive name for the node:
+#
+node.name: node-1
+#
+# Add custom attributes to the node:
+#
+#node.attr.rack: r1
+#
+# ----------------------------------- Paths ------------------------------------
+#
+# Path to directory where to store the data (separate multiple locations by comma):
+#
+path.data: /var/lib/elasticsearch
+#
+# Path to log files:
+#
+path.logs: /var/log/elasticsearch
+#
+# ----------------------------------- Memory -----------------------------------
+#
+# Lock the memory on startup:
+#
+#bootstrap.memory_lock: true
+#
+# Make sure that the heap size is set to about half the memory available
+# on the system and that the owner of the process is allowed to use this
+# limit.
+#
+# Elasticsearch performs poorly when the system is swapping the memory.
+#
+# ---------------------------------- Network -----------------------------------
+#
+# By default Elasticsearch is only accessible on localhost. Set a different
+# address here to expose this node on the network:
+#
+#network.host: 0.0.0.0
+#
+# By default Elasticsearch listens for HTTP traffic on the first free port it
+# finds starting at 9200. Set a specific HTTP port here:
+#
+#http.port: 9200
+#
+# For more information, consult the network module documentation.
+#
+# --------------------------------- Discovery ----------------------------------
+#
+# Pass an initial list of hosts to perform discovery when this node is started:
+# The default list of hosts is ["127.0.0.1", "[::1]"]
+#
+discovery.seed_hosts: ["127.0.0.1", "[::1]"]
+#
+# Bootstrap the cluster using an initial set of master-eligible nodes:
+#
+#cluster.initial_master_nodes: ["node-1", "node-2"]
+#
+# For more information, consult the discovery and cluster formation module documentation.
+#
+# ---------------------------------- Various -----------------------------------
+#
+# Require explicit names when deleting indices:
+#
+#action.destructive_requires_name: true
+#
+# ---------------------------------- Security ----------------------------------
+#
+#                                 *** WARNING ***
+#
+# Elasticsearch security features are not enabled by default.
+# These features are free, but require configuration changes to enable them.
+# This means that users don’t have to provide credentials and can get full access
+# to the cluster. Network connections are also not encrypted.
+#
+# To protect your data, we strongly encourage you to enable the Elasticsearch security features. 
+# Refer to the following documentation for instructions.
+#
+# https://www.elastic.co/guide/en/elasticsearch/reference/7.16/configuring-stack-security.html
+network.host: 127.0.0.1
+http.host: 0.0.0.0
+http.port: 9200
+discovery.type: single-node
+

ansible/elastic-play.yaml

@@ -0,0 +1,25 @@
+---
+- name: 1 install  Elastic
+  hosts: elasticsearch
+  become: yes
+  gather_facts: true
+
+  tasks:
+  - name: Установка elasticsearch
+    apt:
+      deb: "https://mirror.yandex.ru/mirrors/elastic/7/pool/main/e/elasticsearch/elasticsearch-7.17.1-amd64.deb"
+
+  - name: 2 copy elasticsearch
+    copy:
+      src: /home/diploma1/.ansible/elastic-conf.yaml
+      dest: /etc/elasticsearch/elasticsearch.yml
+
+  - name: daemon_reload
+    systemd:
+      daemon_reload: true
+
+  - name: 3 Перезапуск elasticsearch и добавляем в автозагрузку
+    service:
+      name: elasticsearch
+      state: restarted
+      enabled: yes

ansible/filebeat-play.yaml

@@ -0,0 +1,27 @@
+---
+- name: 1 installFilebeat
+  hosts: nginx-web
+  become: yes
+  gather_facts: true
+  vars:
+    kibana_host: 192.168.40.30:5601
+    elastic_host: 192.168.10.30:9200
+  tasks:
+  - name: 2 Устанавливаем filebeat
+    apt:
+      deb: "https://mirror.yandex.ru/mirrors/elastic/7/pool/main/f/filebeat/filebeat-7.17.1-amd64.deb"
+
+  - name: 3 copy file filebeat
+    template:
+      src: /home/diploma1/.ansible/filebeat.j2
+      dest: /etc/filebeat/filebeat.yml
+
+  - name: daemon_reload
+    systemd:
+      daemon_reload: true
+
+  - name: 4 Перезапускаем filebeat и добавляем в автозагрузку
+    service:
+      name: filebeat
+      state: restarted
+      enabled: yes

ansible/filebeat.j2

@@ -0,0 +1,30 @@
+#=========================== Filebeat inputs =============================
+
+filebeat.inputs:
+- type: log
+  enabled: true
+  paths:
+    - /var/log/nginx/access.log
+    - /var/log/nginx/error.log
+
+#============================= Filebeat modules ===============================
+
+filebeat.config.modules:
+  path: ${path.config}/modules.d/*.yml
+  reload.enabled: false
+
+#==================== Elasticsearch template setting ==========================
+
+setup.template.settings:
+  index.number_of_shards: 1
+
+#============================== Kibana =====================================
+
+setup.kibana:
+  host: "{{kibana_host}}"
+
+#-------------------------- Elasticsearch output ------------------------------
+
+output.elasticsearch:
+  hosts: ["{{elastic_host}}"]
+

ansible/hosts

@@ -0,0 +1,24 @@
+[nginx-web]
+nginx-1 ansible_ssh_user=diploma1 ansible_sudo_pass=***
+nginx-2 ansible_ssh_user=diploma1 ansible_sudo_pass=***
+
+[zabbix]
+zabbix ansible_ssh_user=diploma1 ansible_sudo_pass=***  
+
+[elasticsearch]
+elasticsearch
+
+[kibana]
+kibana
+
+[nginx-web:vars]
+ansible_ssh_common_args='-o ProxyCommand="ssh -W %h:%p -q diploma1@46.21.244.219"'
+
+[zabbix:vars]
+ansible_ssh_common_args='-o ProxyCommand="ssh -W %h:%p -q diploma1@46.21.244.219"'
+
+[elasticsearch:vars]
+ansible_ssh_common_args='-o ProxyCommand="ssh -W %h:%p -q diploma1@46.21.244.219"'
+
+[kibana:vars]
+ansible_ssh_common_args='-o ProxyCommand="ssh -W %h:%p -q diploma1@46.21.244.219"'

ansible/kibana-play.yaml

@@ -0,0 +1,26 @@
+---
+- name: 1 install Kibana
+  hosts: kibana
+  become: yes
+  vars:
+    elastic_httphost: 192.168.10.30:9200
+  tasks:
+
+  - name: 2 Установка пакета kibana
+    apt:
+      deb: "https://mirror.yandex.ru/mirrors/elastic/7/pool/main/k/kibana/kibana-7.17.1-amd64.deb"
+
+  - name: 3 copy file  kibana
+    template:
+      src: /home/diploma1/.ansible/kibana.j2
+      dest: /etc/kibana/kibana.yml
+
+  - name: daemon_reload
+    systemd:
+      daemon_reload: true
+
+  - name: 4 Перезапускаем kibana и добавляем в автозагрузку
+    service:
+      name: kibana
+      state: restarted
+      enabled: yes

ansible/kibana.j2

@@ -0,0 +1,3 @@
+server.port: 5601
+server.host: "0.0.0.0"
+elasticsearch.hosts: ["http://{{elastic_httphost}}"]

ansible/nginx-playbook.yaml

@@ -0,0 +1,50 @@
+---
+- name: test
+  hosts: nginx-web
+  become: yes
+
+  tasks:
+    - name: update пакетов
+      apt:
+        force_apt_get: true
+        upgrade: dist
+        update_cache: yes
+      become: true
+
+    - name: install nginx
+      apt: 
+        name: nginx
+        state: latest
+        update_cache: yes
+
+- name:  copy ngx1.html на первый сервер
+  hosts: nginx-1
+  become: yes
+
+  tasks:
+    - name: copy index_new.html
+      ansible.builtin.copy:
+        src: /home/diploma1/.ansible/ngx1.html
+        dest: /var/www/html/index.html
+        owner: root
+        group: sudo
+        mode: "0644"
+
+- name:  copy ngx2.html на второй сервер
+  hosts: nginx-2
+  become: yes
+
+  tasks:
+    - name: copy index_new.html
+      ansible.builtin.copy:
+        src: /home/diploma1/.ansible/ngx2.html
+        dest: /var/www/html/index.html
+        owner: root
+        group: sudo
+        mode: "0644"
+
+  handlers:
+    - name: reload nginx
+      systemd:
+        name: nginx
+        state: reloaded

ansible/ngx1.html

@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+<meta charset="utf-8" />
+<title>Dyplom project System administration</title>
+<style>
+    body {
+        width: 45em;
+        margin: 0 auto;
+          }
+</style>
+</head>
+<body>
+<h1>Добро пожаловать на nginx-1</h1>
+<h2><font color="#ff0000"></font>Tarkov Viktor</font></h2>
+<h2>SYS-43<h2>
+</body>
+</html>

ansible/ngx2.html

@@ -0,0 +1,24 @@
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+<meta charset="utf-8" />
+<title>Welcome to nginx!</title>
+<style>
+    body {
+        width: 35em;
+        margin: 0 auto;
+        font-family: Tahoma, Verdana, Arial, sans-serif;
+	background-color: #a4acd3;
+    }
+</style>
+</head>
+<body>
+    <h1>Page generated by </h1>
+    <h2><i><font color="#ff0000"></font> SYS-43 <br>TARKOV VIKTOR</a><br></font></i></h2>
+<p>Hello, world!.</p>
+<br>
+
+<p><em>-------------------------------------------------------------</em></p>
+<p><b><center>nginx-2</center></b></p>
+</body>
+</html>

ansible/zabbix-agent-playbook.yaml

@@ -0,0 +1,37 @@
+---
+
+- name: install zabbix-agent
+  hosts: all
+  become: true
+
+  tasks:
+  - name: apt update
+    apt:
+      upgrade: yes
+      update_cache: yes
+
+  - name: download zabbix-agent
+    get_url:
+      url: https://repo.zabbix.com/zabbix/7.4/release/ubuntu/pool/main/z/zabbix-release/zabbix-release_latest_7.4+ubuntu24.04_all.deb
+      dest: /tmp/zabbix-release_latest_7.4+ubuntu24.04_all.deb
+
+  - name: dpkg -i zabbix-agent
+    apt:
+      deb: /tmp/zabbix-release_latest_7.4+ubuntu24.04_all.deb
+
+  - name: apt update
+    apt:
+      update_cache: yes
+
+  - name: apt install zabbix-agent
+    apt:
+      name: zabbix-agent
+
+  - name: ip replacement in zabbix_agentd.conf
+    shell: |
+      sed -i 's/Server=127.0.0.1/Server=192.168.40.20/g' /etc/zabbix/zabbix_agentd.conf
+
+  - name: restart and enable zabbix-agent
+    shell: |
+      systemctl restart zabbix-agent
+      systemctl enable zabbix-agent