[vsftpd] deployed on ptf and eclat

host_vars/eclat.adm.crans.org.yml

@@ -23,3 +23,6 @@ loc_rsyncd:
       path: /mirror/pub/
       comment: CR@NS MIRROR
       hosts_allow: "*"
+
+loc_vsftpd:
+  root: /mirror/pub

host_vars/ptf.adm.crans.org.yml

@@ -64,3 +64,6 @@ loc_nginx:
             - "mp4"
             - "mp4_buffer_size 1m"
             - "mp4_max_buffer_size 5m"
+
+loc_vsftpd:
+  root: /ftp

hosts

@@ -31,7 +31,6 @@ routeur-gulp.cachan-adm.crans.org
 monitoring.adm.crans.org
 
 [certbot]
-charybde.adm.crans.org
 sputnik.adm.crans.org
 
 [certbot:children]
@@ -43,6 +42,7 @@ mailman
 radius  # We use certbot to manage LE certificates
 reverseproxy
 thelounge
+vsftpd
 
 [dhcp:children]
 routeurs_vm
@@ -221,6 +221,8 @@ sam.adm.crans.org
 
 [vsftpd]
 charybde.adm.crans.org
+eclat.adm.crans.org
+ptf.adm.crans.org
 
 [wiki]
 kiwi.adm.crans.org

roles/vsftpd/templates/rsyncd.conf.j2

-{{ ansible_header | comment }}
-
-# GLOBAL OPTIONS
-log file=/var/log/rsyncd
-# for pid file, dont' use /var/run/rsync.pid unless you're not going to run
-# rsync out of the init.d script. The /var/run/rsyncd.pid below is OK.
-pid file=/var/run/rsyncd.pid
-syslog facility=daemon
-
-uid = root
-gid = root
-use chroot = no
-read only = yes
-# On ne liste pas les modules
-list = no
-#max connections=2
-ignore errors = no
-ignore nonreadable = yes
-# ne loggue pas tous les fichiers
-transfer logging = no 
-dont compress = *.gz *.tgz *.zip *.z *.rpm *.deb *.iso *.bz2 *.tbz
-# verifie les droits de /etc/rsyncd.secrets
-strict modes = yes
-# personne n'accede aux modules par defaut
-hosts deny = *
-
-# MODULE OPTIONS
-{% for module in rsyncd.modules -%}
-[{{ module.name }}]
-path = {{ module.path }}
-comment = {{ module.comment }}
-uid = nobody
-gid = nogroup
-hosts allow = {{ module.hosts_allow }}
-read only = yes
-
-{% endfor %}