ansible playbooks for retailor.io infrastructure

roles/fail2ban_exporter/tasks/install.yaml

@@ -0,0 +1,24 @@
+---
+- name: Get fail2ban release download url
+  uri:
+    url: "https://gitlab.com/hctrdev/fail2ban-prometheus-exporter/-/releases/v{{ fail2ban_exporter_version }}/downloads/fail2ban_exporter_{{ fail2ban_exporter_version }}_linux_amd64.tar.gz"
+    follow_redirects: all
+  register: fail2ban_download_url
+
+- name: Download fail2ban Exporter
+  get_url:
+    url: "{{ fail2ban_download_url.url }}"
+    dest: "/tmp/fail2ban_exporter.tar.gz"
+
+- name: Extract fail2ban Exporter
+  unarchive:
+    src: "/tmp/fail2ban_exporter.tar.gz"
+    dest: "/tmp"
+    remote_src: yes
+
+- name: Move fail2ban Exporter binary
+  copy:
+    src: "/tmp/fail2ban_exporter"
+    dest: "/usr/sbin/fail2ban_exporter"
+    remote_src: yes
+    mode: '0755'

roles/fail2ban_exporter/tasks/main.yaml

@@ -0,0 +1,3 @@
+---
+- include_tasks: install.yaml
+- include_tasks: service.yml

roles/fail2ban_exporter/tasks/service.yml

@@ -0,0 +1,23 @@
+---
+- name: Create fail2ban_exporter service file
+  template:
+    src: "fail2ban_exporter.service.j2"
+    dest: "/etc/systemd/system/fail2ban_exporter.service"
+    mode: '0644'
+  tags:
+    - create_service
+
+- name: Reload systemd to pick up the fail2ban_exporter service
+  systemd:
+    daemon_reload: yes
+  tags:
+    - reload_systemd
+
+- name: Enable and start the fail2ban_exporter service
+  systemd:
+    name: fail2ban_exporter
+    state: started
+    enabled: yes
+  tags:
+    - start_fail2ban_exporter
+