Go to file
2019-10-19 14:02:03 +00:00
defaults disable iptables by default 2019-08-04 23:58:04 +02:00
handlers modernize 2019-08-04 22:31:25 +02:00
meta fix indentation and spaces 2019-01-09 22:11:03 +01:00
molecule refactor ci pipeline 2019-10-19 15:57:35 +02:00
tasks fix typo 2019-08-04 22:58:26 +02:00
templates/etc fix ansible_managed handling 2019-08-28 11:09:46 +02:00
.drone.jsonnet refactor ci pipeline 2019-10-19 15:57:35 +02:00
.drone.yml refactor ci pipeline 2019-10-19 15:57:35 +02:00
.gitignore refactor ci pipeline 2019-10-19 15:57:35 +02:00
HEADER.md refactor ci pipeline 2019-10-19 15:57:35 +02:00
LICENSE Initial commit 2018-07-08 18:14:22 +02:00
README.md [SKIP CI] update readme 2019-10-19 14:02:03 +00:00

xoxys.unifi

Build Status

Role to setup unifi

Table of content


Default Variables

unifi_version

Default value

unifi_version: 5.10.25

unifi_openjdk_version

Default value

unifi_openjdk_version: 1.8.0

unifi_restore_after_upgrade

Default value

unifi_restore_after_upgrade: false

unifi_group

Default value

unifi_group: ubnt

unifi_user

Default value

unifi_user: ubnt

unifi_lvm_enabled

Default value

unifi_lvm_enabled: false

unifi_lvm_pvs

Default value

unifi_lvm_pvs:
  - /dev/sdxx

unifi_lvm_vg

Default value

unifi_lvm_vg: vg_unifi

unifi_lvm_lv

Default value

unifi_lvm_lv: lv_unifi

unifi_lvm_size

Default value

unifi_lvm_size: 10G

unifi_lvm_fstype

Default value

unifi_lvm_fstype: xfs

unifi_base_dir

Default value

unifi_base_dir: /opt/unifi

unifi_tmp_dir

Default value

unifi_tmp_dir: '{{ unifi_base_dir }}/tmp'

unifi_iptables_enabled

Default value

unifi_iptables_enabled: false

unifi_open_ports

Default value

unifi_open_ports:
  - name: allow_unifi_web
    rules: "-A INPUT -m state --state NEW -p tcp --dport 8443 -j ACCEPT\n"
    state: present
  - name: allow_unifi_comm
    rules: "-A INPUT -m state --state NEW -p tcp --dport 8080 -j ACCEPT\n-A OUTPUT\
      \ -m state --state NEW -p tcp --dport 8080 -j ACCEPT\n"
    state: present
  - name: allow_unifi_stun
    rules: "-A INPUT -m state --state NEW -p udp --dport 3478 -j ACCEPT\n-A OUTPUT\
      \ -m state --state NEW -p udp --dport 3478 -j ACCEPT\n"
    state: present
  - name: allow_unifi_discover
    rules: "-A INPUT -m state --state NEW -p udp --dport 10001 -j ACCEPT\n-A OUTPUT\
      \ -m state --state NEW -p udp --dport 10001 -j ACCEPT\n"
    state: present
  - name: allow_unifi_sped
    rules: "-A INPUT -m state --state NEW -p tcp --dport 6789 -j ACCEPT\n"
    state: present
  - name: allow_unifi_adopt
    rules: "-A OUTPUT -m state --state NEW -p tcp --dport 22 -j ACCEPT\n"
    state: present

unifi_tls_enabled

Default value

unifi_tls_enabled: false

unifi_tls_pkcs12_passphrase

Default value

unifi_tls_pkcs12_passphrase: temppass

unifi_tls_certs_dir

Default value

unifi_tls_certs_dir: '{{ unifi_base_dir }}/tls/certs'

unifi_tls_key_dir

Default value

unifi_tls_key_dir: '{{ unifi_base_dir }}/tls/private'

unifi_tls_cert_file

Default value

unifi_tls_cert_file: '{{ unifi_tls_certs_dir }}/mycert.pem'

unifi_tls_key_file

Default value

unifi_tls_key_file: '{{ unifi_tls_key_dir }}/mykey.pem'

unifi_tls_cert_source

Default value

unifi_tls_cert_source: mycert.pem

unifi_tls_key_source

Default value

unifi_tls_key_source: mykey.pem

Dependencies

None.

License

MIT

Author

xoxys