Menno van Leeuwen
e6283d1c55
Some checks failed
Nix Format Check / check-format (push) Failing after 43s
51 lines
2.1 KiB
YAML
51 lines
2.1 KiB
YAML
- name: Configure SSHFS
|
|
block:
|
|
- name: Get SSHFS credentials via local lookup
|
|
delegate_to: localhost
|
|
ansible.builtin.set_fact:
|
|
sshfs_user: "{{ lookup('community.general.onepassword', '5j5y5axfjr3f3sn5nixb6htg4y', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='username') }}"
|
|
sshfs_pass: "{{ lookup('community.general.onepassword', '5j5y5axfjr3f3sn5nixb6htg4y', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='password') }}"
|
|
sshfs_host: "{{ lookup('community.general.onepassword', '5j5y5axfjr3f3sn5nixb6htg4y', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='host') }}"
|
|
sshfs_port: 23
|
|
remote_path: /mnt/storage-box
|
|
|
|
- name: Install SSHFS package
|
|
become: true
|
|
ansible.builtin.package:
|
|
name: sshfs
|
|
state: present
|
|
|
|
- name: Create mount point directory
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: "{{ remote_path }}"
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
- name: Create credentials file for SSHFS
|
|
become: true
|
|
ansible.builtin.copy:
|
|
content: "username={{ sshfs_user }}\npassword={{ sshfs_pass }}"
|
|
dest: /etc/sshfs-credentials
|
|
mode: '0600'
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Add fstab entry for SSHFS
|
|
become: true
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/fstab
|
|
line: "sshfs#{{ sshfs_user }}@{{ sshfs_host }}: {{ remote_path }} fuse.sshfs credentials=/etc/sshfs-credentials,port={{ sshfs_port }},reconnect,ServerAliveInterval=15,ServerAliveCountMax=3,uid=1000,gid=1000,_netdev 0 0"
|
|
state: present
|
|
regexp: "^sshfs#.*{{ remote_path }}"
|
|
backup: true
|
|
|
|
- name: Mount SSHFS filesystem
|
|
become: true
|
|
ansible.builtin.command:
|
|
cmd: "sshfs {{ sshfs_user }}@{{ sshfs_host }}:/ {{ remote_path }} -o port={{ sshfs_port }},password_stdin,_netdev,reconnect,ServerAliveInterval=15,ServerAliveCountMax=3"
|
|
stdin: "{{ sshfs_pass }}"
|
|
register: mount_result
|
|
changed_when: mount_result.rc == 0
|
|
failed_when: mount_result.rc != 0 and "already mounted" not in mount_result.stderr
|