grafana.yml

---
- name: Grafana
  hosts: grafana
  become: true
  vars:
    hostname: stats.galaxyproject.eu
  vars_files:
    - group_vars/grafana-gitter-bridge.yml
    - secret_group_vars/all.yml
  # This shouldn't be necessary? but if certs fail, then do this. This is
  # *supposed* to be properly handled by the nginx role, but the permission
  # change is likely only applied if a change is detected since it can't figure
  # out if the rule is there or not.
  # TODO: make the nginx task check if the rule is in place, rather than a change in path.
  #pre_tasks:
    #- name: Put SELinux in permissive mode, logging actions that would be blocked.
      #selinux:
        #policy: targeted
        #state: permissive
  roles:
    - hostname
    - usegalaxy-eu.dynmotd
    - geerlingguy.repo-epel
    - hxr.admin-tools
    - influxdata.chrony
    - hxr.monitor-email
    - hxr.monitor-ssl
    - linuxhq.yum_cron
    - galaxyproject.nginx
    #- hxr.autofs-format-n-mount
    # Custom
    #- hxr.simple-nagios
    - cloudalchemy.grafana
    - pgs
    - hxr.grafana-gitter-bridge
    # End Custom
    - dj-wasabi.telegraf
    - dev-sec.os-hardening
    - dev-sec.ssh-hardening