From 0b25eb194ea75850f9e821e9fbf36f335d37c1c5 Mon Sep 17 00:00:00 2001 From: vincent Date: Sun, 17 Mar 2024 19:07:51 +0100 Subject: [PATCH] feat: add authorization for local docker in nfs --- ansible/group_vars/NAS/nfs | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/ansible/group_vars/NAS/nfs b/ansible/group_vars/NAS/nfs index d60c021..404b672 100644 --- a/ansible/group_vars/NAS/nfs +++ b/ansible/group_vars/NAS/nfs @@ -1,14 +1,15 @@ -nfs_cluster_list: "{% for server in groups['all']%} {% if hostvars[server]['ansible_default_ipv4']['address'] is defined %} {{hostvars[server]['ansible_' + hostvars[server]['nfs_iface']|default('')].ipv4.address|default(hostvars[server]['ansible_default_ipv4']['address'],true)}}(rw,no_root_squash,crossmnt,async,insecure_locks,sec=sys) {% endif %} {%endfor%}" +nfs_cluster_list: "{% for server in groups['all']%} {% if hostvars[server]['ansible_default_ipv4']['address'] is defined %} {{hostvars[server]['ansible_' + hostvars[server]['nfs_iface']|default('')].ipv4.address|default(hostvars[server]['ansible_default_ipv4']['address'],true)}}{{ nfs_options }} {% endif %} {%endfor%}" +nfs_options: "(rw,no_root_squash,crossmnt,async,insecure_locks,sec=sys)" nfs_consul_service: true nfs_bind_target: "/exports" nfs_exports: - "{{ nas_bind_target }} *(fsid=0,insecure,no_subtree_check)" - - "{{ nas_bind_target }}/nomad {{nfs_cluster_list}}" - - "{{ nas_bind_target }}/download {{nfs_cluster_list}}" - - "{{ nas_bind_target }}/music {{nfs_cluster_list}}" - - "{{ nas_bind_target }}/media {{nfs_cluster_list}}" - - "{{ nas_bind_target }}/photo {{nfs_cluster_list}}" - - "{{ nas_bind_target }}/homes {{nfs_cluster_list}}" - - "{{ nas_bind_target }}/ebook {{nfs_cluster_list}}" + - "{{ nas_bind_target }}/nomad {{nfs_cluster_list}} 172.17.0.0/16{{ nfs_options }}" + - "{{ nas_bind_target }}/download {{nfs_cluster_list}} 172.17.0.0/16{{ nfs_options }}" + - "{{ nas_bind_target }}/music {{nfs_cluster_list}} 172.17.0.0/16{{ nfs_options }}" + - "{{ nas_bind_target }}/media {{nfs_cluster_list}} 172.17.0.0/16{{ nfs_options }}" + - "{{ nas_bind_target }}/photo {{nfs_cluster_list}} 172.17.0.0/16{{ nfs_options }}" + - "{{ nas_bind_target }}/homes {{nfs_cluster_list}} 172.17.0.0/16{{ nfs_options }}" + - "{{ nas_bind_target }}/ebook {{nfs_cluster_list}} 172.17.0.0/16{{ nfs_options }}"