ansible/handlers/restart_services.yml
Greg Sutcliffe 4d0a89d1fd
Zabbix: Make agent service handler global
We have some hosts that do not include the zabbix_agent role which means
they cannot find the restart handler for things like the postfix
monitoring - and even then the restart would fail because the agent
service doesn't exist

This adds a global handler that is allowed to fail if the service is
missing, but otherwise should fail normally for other problems

This can probably be changed once we have zabbix everywhere...

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-10-02 13:27:19 +01:00

198 lines
5.2 KiB
YAML

########################################
# Handlers for restarting services
#
---
- name: Reload systemd
ansible.builtin.command: systemctl daemon-reload
- name: Restart apache
ansible.builtin.command: /usr/local/bin/conditional-restart.sh httpd httpd
- name: Reload apache
action: service name=httpd state=reloaded
- name: Restart collectd
action: service name=collectd state=restarted
- name: Restart crond
action: service name=crond state=restarted
- name: Restart fm-consumer@koji_sync_listener
action: service name=fm-consumer@koji_sync_listener state=restarted enabled=yes
- name: Reload httpd
ansible.builtin.command: /usr/local/bin/conditional-reload.sh httpd httpd
- name: Restart iptables
action: service name=iptables state=restarted
- name: Restart nftables
action: service name=nftables state=restarted
- name: Restart ip6tables
action: service name=ip6tables state=restarted
- name: Restart libvirtd
action: service name=libvirtd state=restarted
- name: Restart virtnetworkd
action: service name=virtnetworkd state=restarted
- name: Restart libvirtd.socket
action: service name=libvirtd.socket state=stopped
notify: Restart libvirtd
- name: Restart mailman
action: service name=mailman state=restarted
- name: Restart named
action: service name=named state=restarted
- name: Restart ntpd
action: service name=ntpd state=restarted
- name: Restart sshd
action: service name=sshd state=restarted
- name: Restart openvpn (Fedora)
when: ansible_distribution == "Fedora"
action: service name=openvpn-client@openvpn state=restarted
# notify:
# - Fix openvpn routing
- name: Restart openvpn (RHEL7+)
when: ansible_distribution == "RedHat" and ansible_distribution_major_version|int >= 7
action: service name=openvpn-client@openvpn state=restarted
# notify:
# - Fix openvpn routing
- name: Fix openvpn routing
action: shell /etc/openvpn/fix-routes.sh
- name: Restart xinetd
action: service name=xinetd state=restarted
when: not inventory_hostname.startswith('proxy')
- name: Restart netapproute
action: command /etc/sysconfig/network-scripts/ifup-routes eth1
- name: Restart network
action: service name=network state=restarted
- name: Rebuild postfix transport
ansible.builtin.command: /usr/sbin/postmap /etc/postfix/transport
- name: Rebuild postfix bysender
ansible.builtin.command: /usr/sbin/postmap /etc/postfix/bysender
- name: Rebuild postfix tls_policy
ansible.builtin.command: /usr/sbin/postmap /etc/postfix/tls_policy
- name: Restart postfix
service: name=postfix state=restarted
- name: Reload proxyhttpd
ansible.builtin.command: /usr/local/bin/proxy-conditional-reload.sh httpd httpd
- name: Run rkhunter
ansible.builtin.command: rkhunter --propupd
- name: Restart moksha-hub
service: name=moksha-hub state=restarted
- name: Restart dhcpd
service: name=dhcpd state=restarted
- name: Restart memcached
service: name=memcached state=restarted
- name: Restart nagios
ansible.builtin.shell: nagios -v /etc/nagios/nagios.cfg && systemctl restart nagios
- name: Restart bridge
ansible.builtin.shell: /usr/lib/systemd/systemd-sysctl --prefix=/proc/sys/net/bridge
- name: Reload libvirtd
service: name=libvirtd state=reloaded
ignore_errors: true
when: ansible_virtualization_role == 'host'
- name: Restart pagure_ev
service: name=pagure_ev state=restarted
- name: Update ca-trust
ansible.builtin.command: /usr/bin/update-ca-trust
- name: Restart stunnel
service: name=stunnel state=restarted
- name: Restart mirrorlist-server
service: name=mirrorlist-server state=restarted
- name: Restart NetworkManager
service: name=NetworkManager state=restarted
- name: Reload NetworkManager-connections
ansible.builtin.command: nmcli c reload
- name: Apply interface-changes
ansible.builtin.command: nmcli con up {{ item.split()[1] }}
async: 1
poll: 0
loop: "{{ if_uuid.stdout_lines|flatten(levels=1) }}"
when: item.split()[1] not in ansible_ifcfg_disabled
- name: Flush journald tmpfiles to persistent store
ansible.builtin.command: pkill -f -USR1 systemd-journald
- name: Restart idmapd
service: name=nfs-idmapd state=restarted
- name: Restart buildmaster
service: name=buildmaster state=restarted
- name: Restart rabbitmq
systemd:
name: rabbitmq-server
state: restarted
daemon_reload: yes
- name: Restart chronyd
service: name=chronyd state=restarted
- name: Restart kojira
systemd:
name: kojira
state: restarted
- name: Restart haveged
service: name=haveged state=restarted
- name: Restart obs-signd
service: name=signd state=restarted
- name: Restart swap.swap
service: name="swap.swap" state=restarted
- name: Restart varnish
service: name=varnish state=restarted
- name: Reload varnish
service: name=varnish state=reload
- name: Restart systemd-oomd
service: name=systemd-oomd state=reload
- name: Restart debuginfod
service: name=debuginfod state=restarted
# This is allowed to fail when the zabbix agent is not found
# as it may be triggered from hosts without the zabbix_agent role
- name: Restart zabbix agent
ansible.builtin.systemd:
name: zabbix-agent
state: restarted
register: zabbix_restart
failed_when:
- zabbix_restart.failed
- "'Could not find' not in zabbix_restart.msg"