micro_wd_nfs.yml

- hosts: localhost
  connection: local

  name: PERFORM CONFIGURATION NFS EXPORTS FROM WESTERN DIGITAL EXTERNAL DISK
  gather_facts: no
  become: yes

  vars:
  # Explicitly telling Ansible to use Python3, because of the bug below:
  #     # https://github.com/ansible/ansible/issues/54855
  - ansible_python_interpreter: /usr/bin/python3

  tasks:

  - name: Create the mount point for both volumes
    file:
      path: '{{ item }}'
      state: directory
      owner: root
      group: root
      mode: '0755'
    loop:
      - /mnt/sg3/
      - /mnt/wd_xfs1/
      - /mnt/martinbackup/
      - /mnt/sg1/
      - /srv/nfs4/sg3/
      - /srv/nfs4/wd_xfs1/
    tags:
    - nfs
    - martin

  - name: Mount the filesystem for media/backups
    mount:
      path: /mnt/sg3
      src: LABEL=WD_SG3
      fstype: ext4
      state: mounted
      backup: yes
    tags:
    - nfs

  - name: Mount the filesystem for laptop image backups
    mount:
      path: /mnt/wd_xfs1
      src: LABEL=WD_XFS1
      fstype: xfs
      state: mounted
      backup: yes
    tags:
    - nfs

  - name: Mount the filesystem for Martin's drive backups
    mount:
      path: /mnt/martinbackup
      src: LABEL=WD_MARTIN
      fstype: ext4
      state: mounted
      backup: yes
    tags:
    - nfs
    - martin

  - name: Create the bind mounts
    mount:
      path: /srv/nfs4/sg3
      src: /mnt/sg3
      opts: bind
      fstype: none
      state: mounted
      backup: yes
    tags:
    - nfs

  - name: Create the bind mounts
    mount:
      path: /srv/nfs4/wd_xfs1
      src: /mnt/wd_xfs1
      opts: bind
      fstype: none
      state: mounted
      backup: yes
    tags:
    - nfs

  - name: Create the LIBNFSIDMAP configuration
    lineinfile:
      path: /etc/idmapd.conf
      regexp: '^#Domain'
      line: Domain = nuc.lan
      backup: yes
    tags:
    - nfs

  - name: Export the filesystems (/etc/exports)
    copy:
      src: nfs/exports
      dest: /etc/exports
      owner: root
      group: root
      mode: 0644
    tags:
    - nfs

  - name: ENABLE THE NFS SYSTEM SERVICES
    systemd:
      name: "{{ item }}"
      enabled: yes
      state: started
    loop:
      - rpcbind
      - nfs-server
    tags:
    - nfs

  - name: Open the appropriate firewall ports
    firewalld:
      zone: FedoraServer
      service: '{{ item }}'
      permanent: yes
      immediate: yes
      state: enabled
    loop:
      - nfs
      - nfs3
      - mountd
      - rpc-bind
    tags:
    - nfs

  - name: Open the appropriate firewall services for local VMs to access mounts
    firewalld:
      zone: libvirt
      service: '{{ item }}'
      permanent: yes
      immediate: yes
      state: enabled
    loop:
      - nfs
    tags:
    - nfs