65 lines
1.6 KiB
YAML
65 lines
1.6 KiB
YAML
---
|
|
# guacd + FreeRDP als reine Protokoll-Engine fuer RDP (Konzept 3/4.3).
|
|
# Laeuft ausschliesslich lokal gebunden, kein Netzwerkzugriff von aussen.
|
|
|
|
- name: guacd und FreeRDP-Plugin installieren
|
|
ansible.builtin.apt:
|
|
name:
|
|
- guacd
|
|
- libguac-client-rdp0
|
|
state: present
|
|
update_cache: true
|
|
|
|
- name: Dedizierten guacd-User sicherstellen (Paket legt i.d.R. bereits einen an)
|
|
ansible.builtin.user:
|
|
name: guacd
|
|
system: true
|
|
shell: /usr/sbin/nologin
|
|
create_home: false
|
|
ignore_errors: true
|
|
|
|
- name: guacd nur an localhost binden
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/guacamole/guacd.conf
|
|
regexp: '^bind_host'
|
|
line: "bind_host = 127.0.0.1"
|
|
create: true
|
|
notify: restart guacd
|
|
|
|
- name: guacd-Port setzen
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/guacamole/guacd.conf
|
|
regexp: '^bind_port'
|
|
line: "bind_port = {{ guacd_port }}"
|
|
create: true
|
|
notify: restart guacd
|
|
|
|
- name: RDP-Laufwerksumleitungs-Verzeichnisse anlegen (Filetransfer, Konzept 4.3)
|
|
ansible.builtin.file:
|
|
path: "/var/lib/jumphost/rdp-drives"
|
|
state: directory
|
|
owner: guacd
|
|
group: guacd
|
|
mode: "0750"
|
|
|
|
- name: Override-Verzeichnis fuer guacd-Unit anlegen
|
|
ansible.builtin.file:
|
|
path: /etc/systemd/system/guacd.service.d
|
|
state: directory
|
|
owner: root
|
|
group: root
|
|
mode: "0755"
|
|
|
|
- name: Gehaertete systemd-Unit fuer guacd ausrollen (Override)
|
|
ansible.builtin.template:
|
|
src: guacd.service.j2
|
|
dest: /etc/systemd/system/guacd.service.d/override.conf
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
vars:
|
|
_dummy: true
|
|
notify:
|
|
- reload systemd
|
|
- restart guacd
|