4 files changed, 48 insertions, 0 deletions

diff --git a/roles/services/freeipa/client/defaults/main.yml b/roles/services/freeipa/client/defaults/main.yml
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/roles/services/freeipa/client/defaults/main.yml
diff --git a/roles/services/freeipa/client/tasks/main.yml b/roles/services/freeipa/client/tasks/main.yml
new file mode 100644
index 0000000..ccb047e
--- /dev/null
+++ b/roles/services/freeipa/client/tasks/main.yml
@@ -0,0 +1,4 @@
+---
+- name: configure freeipa client
+  include_role:
+    name: freeipa.ansible_freeipa.ipaclient
diff --git a/roles/services/freeipa/server/defaults/main.yml b/roles/services/freeipa/server/defaults/main.yml
new file mode 100644
index 0000000..3e91a21
--- /dev/null
+++ b/roles/services/freeipa/server/defaults/main.yml
@@ -0,0 +1 @@
+ipabackup_from_controller: yes
diff --git a/roles/services/freeipa/server/tasks/main.yml b/roles/services/freeipa/server/tasks/main.yml
new file mode 100644
index 0000000..32badc2
--- /dev/null
+++ b/roles/services/freeipa/server/tasks/main.yml
@@ -0,0 +1,43 @@
+---
+- name: set fedora dns
+  lineinfile:
+    path: /etc/systemd/resolved.conf
+    regexp: "^#?DNS="
+    line: "DNS={{ ipa_dns_ip }}"
+
+- name: restart systemd-resolved
+  service:
+    name: systemd-resolved
+    state: restarted
+
+- name: set hostname
+  hostname:
+    name: ipasrv.home.local
+
+- name: remove lines from /etc/hosts
+  lineinfile:
+    path: /etc/hosts
+    regexp: "^::1.*ipasrv"
+    state: absent
+
+- name: remove lines from /etc/hosts
+  lineinfile:
+    path: /etc/hosts
+    regexp: "^127.0.0.1.*ipasrv"
+    state: absent
+
+- name: add line to /etc/hosts
+  lineinfile:
+    path: /etc/hosts
+    line: "{{ ansible_default_ipv4.address }} ipasrv.home.local ipasrv"
+    state: present
+
+- name: install freeipa-server
+  package:
+    name: freeipa-server
+    state: latest
+
+#- name: restore ipaserver from backup
+  #include_role:
+    #name: freeipa.ansible_freeipa.ipabackup
+    #state: restored