# 0. 전역 변수 정의
- name: Example with global vars
  hosts: all
  become: true
  vars:
    my_message: "Hello from Ansible!"
  tasks:
    - name: Show variable message
      debug:
        msg: "{{ my_message }}"


---


# 1. 방화벽 포트 열기 (firewalld)
- name: Open HTTP port 80
  hosts: webservers
  become: true
  tasks:
    - name: Ensure firewalld is running
      service:
        name: firewalld
        state: started
        enabled: true


    - name: Open port 80/tcp
      firewalld:
        port: 80/tcp
        permanent: true
        state: enabled
        immediate: yes


---


# 2. SELinux 설정 변경
- name: Set SELinux to permissive
  hosts: all
  become: true
  tasks:
    - name: Change SELinux mode
      selinux:
        state: permissive


---


# 3. YUM 저장소 등록
- name: Add custom YUM repo
  hosts: all
  become: true
  tasks:
    - name: Create custom repo file
      copy:
        dest: /etc/yum.repos.d/custom.repo
        content: |
          [custom-repo]
          name=Custom Repository
          baseurl=http://192.168.0.1/repo/
          enabled=1
          gpgcheck=0


---


# 4. 패키지 설치 (YUM)
- name: Install packages via YUM
  hosts: all
  become: true
  tasks:
    - name: Install git and wget
      yum:
        name:
          - git
          - wget
        state: present


---


# 5. 커널 파라미터 설정 (sysctl)
- name: Configure sysctl parameters
  hosts: all
  become: true
  tasks:
    - name: Set vm.swappiness to 10
      sysctl:
        name: vm.swappiness
        value: '10'
        state: present
        reload: yes


---


# 6. 호스트 파일 등록 (/etc/hosts)
- name: Update /etc/hosts with app server
  hosts: all
  become: true
  tasks:
    - name: Add host entry
      lineinfile:
        path: /etc/hosts
        line: "192.168.1.100 app-server"
        state: present


---


# 7. SSH 공개키 배포
- name: Deploy SSH public key
  hosts: all
  become: true
  vars:
    ssh_user: devuser
    ssh_pubkey: "{{ lookup('file', 'id_rsa.pub') }}"
  tasks:
    - name: Ensure .ssh directory exists
      file:
        path: "/home/{{ ssh_user }}/.ssh"
        state: directory
        owner: "{{ ssh_user }}"
        group: "{{ ssh_user }}"
        mode: '0700'


    - name: Add authorized key
      authorized_key:
        user: "{{ ssh_user }}"
        key: "{{ ssh_pubkey }}"


---


# 8. 호스트 시간 동기화 설정 (chrony)
- name: Install and configure chrony
  hosts: all
  become: true
  tasks:
    - name: Install chrony
      yum:
        name: chrony
        state: present


    - name: Enable and start chronyd
      service:
        name: chronyd
        state: started
        enabled: yes


    - name: Force time sync
      command: chronyc -a makestep


---


# 9. 디스크 마운트 자동화
- name: Mount /dev/sdb1 to /mnt/data
  hosts: all
  become: true
  tasks:
    - name: Ensure mount directory exists
      file:
        path: /mnt/data
        state: directory


    - name: Mount the disk
      mount:
        path: /mnt/data
        src: /dev/sdb1
        fstype: ext4
        opts: defaults
        state: mounted


---


# 10. 디렉토리 tar.gz로 압축
- name: Archive a directory with tar
  hosts: all
  become: true
  tasks:
    - name: Compress /var/log into /tmp/log_backup.tar.gz
      archive:
        path: /var/log
        dest: /tmp/log_backup.tar.gz
        format: gz


---


# 11. 반복 항목 처리 (loop)
- name: Create multiple users
  hosts: all
  become: true
  tasks:
    - name: Add users with loop
      user:
        name: "{{ item }}"
        state: present
      loop:
        - alice
        - bob
        - charlie


---


# 12. 쉘 기능 포함 명령 실행
- name: Run shell command with pipe and redirection
  hosts: all
  become: true
  tasks:
    - name: List processes and save to file
      shell: "ps aux | grep sshd > /tmp/sshd_processes.txt"
      args:
        executable: /bin/bash